Debian/cyborg: medium 6.3
In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is never populated (NULL for every ARQ), dat
Action: Upgrade cyborg to 14.0.0-3+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.0.0-3+deb13u1 | - |
Fixed versions
| 14.0.0-3+deb13u1 |
Sources
published · modified · JSON