Lucene search

K
redhatRedHatRHSA-2021:5070
HistoryDec 09, 2021 - 7:50 p.m.

(RHSA-2021:5070) Moderate: Red Hat OpenStack Platform 16.1 (python-django20) security update

2021-12-0919:50:28
access.redhat.com
34

0.008 Low

EPSS

Percentile

81.2%

Security Fix(es):

  • Potential directory-traversal via archive.extract() (CVE-2021-3281)

  • potential directory-traversal via uploaded files (CVE-2021-28658)

  • Potential directory-traversal via uploaded files (CVE-2021-31542)

  • Potential directory traversal via admindocs (CVE-2021-33203)

  • Possible indeterminate SSRF RFI and LFI attacks since validators accepted
    leading zeros in IPv4 addresses (CVE-2021-33571)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.