Debian/incus: medium 5.3
Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code respo
Action: Upgrade incus to 6.0.4-2+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.4-2+deb13u1 | - |
Fixed versions
| 6.0.4-2+deb13u1 |
Sources
published · modified · JSON