description: A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
problem types: CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
vendor: n/a
product: openstack-nova
versions:
version: Affects - Nova: <21.2.3, >=22.0.0 <22.2.3, >=23.0.0 <23.0.3 | Fixed-In 21.2.3, 22.3.0, and 23.1.0, status: affected
}