Manila vulnerabilities
1 known vulnerability in Manila from OpenStack. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest first
- 9.9 Critical severity
Manila: Incorrect Authorization
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-auth