CVE-2021-3654

Published: Mar 2, 2022

Modified: Aug 3, 2024

PUBLISHED

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Vendor	Product	Versions
n/a	openstack-nova	affected `Affects - Nova: <21.2.3, >=22.0.0 <22.2.3, >=23.0.0 <23.0.3 \| Fixed-In 21.2.3, 22.3.0, and 23.1.0`

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.