PyPI/keystone CVE-2013-0282: unknown, EPSS 1.76%
OpenStack Keystone allows context-dependent attackers to bypass access restrictions
Action: Upgrade keystone to 8.0.0a0 or later.
pip install keystone==8.0.0a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.0.0a0 | - |
Fixed versions
| 8.0.0a0 |
Sources
- osv: PYSEC-2026-652
- https://nvd.nist.gov/vuln/detail/CVE-2013-0282
- https://github.com/openstack/keystone/commit/7402f5ef994599653bdbb3ed5ff1a2b8c3e72b9f
- https://github.com/openstack/keystone/commit/9572bfc393f66f5ce3b44c0a77a9e29cc0374c6f
- https://github.com/openstack/keystone/commit/f0b4d300db5cc61d4f079f8bce9da8e8bea1081a
- https://bugs.launchpad.net/keystone/+bug/1121494
- https://launchpad.net/keystone/+milestone/2012.2.4
- https://launchpad.net/keystone/grizzly/2013.1
- https://review.openstack.org/#/c/22319
- https://review.openstack.org/#/c/22320
- https://review.openstack.org/#/c/22321
- http://www.openwall.com/lists/oss-security/2013/02/19/3
- https://pypi.org/project/keystone
- https://github.com/advisories/GHSA-8833-qrvm-wc3h
CVE-2013-0282 · published · modified · JSON