Glance vulnerabilities
1 known vulnerability in Glance from OpenStack. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.0average CVSS score
Latest first
- 7.0 High severity
Glance: Server-Side Request Forgery
In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the URL scheme and does not apply the import_filtering_opts host