Bugs : OpenStack Security Advisory

Undecided

Incomplete

#1884341 Anti-spoofing bypass

OpenStack Security Advisory 268

Undecided

Incomplete

#1892848 XSS in adding JavaScript into the ‘Subnet Name’ field

OpenStack Security Advisory 268

Undecided

Incomplete

#1980349 It is possible to trigger a POST-Request to any address via Horizon

OpenStack Security Advisory 258

Undecided

Incomplete

#1980954 Resource leak with HTTPBadRequest in StaticLargeObject.get_slo_segments

OpenStack Security Advisory 258

Undecided

In Progress

#1981813 Compute service fails to restart if the vnic_type of a bound port changed from direct to macvtap (CVE-2022-37394)

OpenStack Security Advisory 256

Undecided

Incomplete

#1982676 Open redirect / phishing attack via "success_url" parameter in OpenStack

OpenStack Security Advisory 258

Undecided

New

#1988026 Neutron should not create security group with project==None

OpenStack Security Advisory 268

Undecided

Incomplete

#1992183 Openstack: Application credential token remains valid longer than expected (CVE-2022-2447)

OpenStack Security Advisory 258

Undecided

Incomplete

#2028159 Invalid IPv6 subnet in self-service network breaks DHCP agent

OpenStack Security Advisory 260

Undecided

Incomplete

#2032682 Heat template network discovery

OpenStack Security Advisory 258

Undecided

Incomplete

#2037876 DHCP Worker skips queued tasks if earlier tasks fail

OpenStack Security Advisory 262

Undecided

Incomplete

#2048103 No limit in length of "image description " parameter results in DOS attack

OpenStack Security Advisory 262

Undecided

Incomplete

#2048493 Horizon exposes secrets via volume transfer URL

OpenStack Security Advisory 260

Undecided

New

#2049762 Service tokens seems to be incorrectly implemented in kolla-ansible

OpenStack Security Advisory 276

Undecided

Incomplete

#2058138 Neutron OVSHybridIptablesFirewallDriver and IptablesFirewallDriver don't enforce Remote address groups

OpenStack Security Advisory 260

Undecided

Incomplete

#2071451 [ml2][ovs][firewall] port changes ofport and local_vlan will lead to wrong flow installation

OpenStack Security Advisory 258