CVE-2021-3654
Assigner: redhat
Published: 2022-03-02T00:00:00
State: PUBLISHED
descriptions: value: A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
affected: vendor: n/a
product: openstack-nova
versions: version: Affects - Nova: <21.2.3, >=22.0.0 <22.2.3, >=23.0.0 <23.0.3 | Fixed-In 21.2.3, 22.3.0, and 23.1.0
status: affected
problemTypes: descriptions: type: CWE
description: CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
cweId: CWE-601