VDB

DEBIAN-CVE-2021-3654

DEBIAN-CVE-2021-3654 PUBLISHED CVSS 6.099999904632568 MEDIUM

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Risk Scores

CVSS v3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Debian:13nova0, 0, 0
Debian:11nova*, *, *
Debian:14nova0, 0, 0
Debian:12nova0, 0, 0

Timeline

  • Mar 2, 2022 CVE Published
  • Apr 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›