PyPI/nova CVE-2022-47951: medium 5.7, EPSS 1.03%
OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
Action: Upgrade nova to 24.1.2 or later.
pip install nova==24.1.2pip install nova==25.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 24.1.2 | - |
| 25.0.0 | 25.0.2 | - |
Fixed versions
| 24.1.2 | 25.0.2 |
Sources
- osv: GHSA-7h75-hwxx-qpgc#PyPI/nova
- https://nvd.nist.gov/vuln/detail/CVE-2022-47951
- https://launchpad.net/bugs/1996188
- https://lists.debian.org/debian-lts-announce/2023/01/msg00040.html
- https://lists.debian.org/debian-lts-announce/2023/01/msg00041.html
- https://lists.debian.org/debian-lts-announce/2023/01/msg00042.html
- https://security.openstack.org/ossa/OSSA-2023-002.html
- https://www.debian.org/security/2023/dsa-5336
- https://www.debian.org/security/2023/dsa-5337
- https://www.debian.org/security/2023/dsa-5338
CVE-2022-47951 · published · modified · JSON