Debian/horizon: medium 6.8
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening
Action: Upgrade horizon to 3:23.0.0-5+deb12u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3:23.0.0-5+deb12u2 | - |
Fixed versions
| 3:23.0.0-5+deb12u2 |
Sources
published · modified · JSON