Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.3.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- rhosp13/openstack-aodh-api
Version range not reported
- rhosp13/openstack-aodh-base
Version range not reported
- rhosp13/openstack-aodh-evaluator
Version range not reported
- rhosp13/openstack-aodh-listener
Version range not reported
- rhosp13/openstack-aodh-notifier
Version range not reported
- rhosp13/openstack-barbican-api
Version range not reported
- rhosp13/openstack-barbican-base
Version range not reported
- rhosp13/openstack-barbican-keystone-listener
Version range not reported
- rhosp13/openstack-barbican-worker
Version range not reported
- rhosp13/openstack-ceilometer-base
Version range not reported
- rhosp13/openstack-ceilometer-central
Version range not reported
- rhosp13/openstack-ceilometer-compute
Version range not reported
- rhosp13/openstack-ceilometer-ipmi
Version range not reported
- rhosp13/openstack-ceilometer-notification
Version range not reported
- rhosp13/openstack-cinder-api
Version range not reported
- rhosp13/openstack-cinder-backup
Version range not reported
- rhosp13/openstack-cinder-base
Version range not reported
- rhosp13/openstack-cinder-scheduler
Version range not reported
- rhosp13/openstack-cinder-volume
Version range not reported
- rhosp13/openstack-collectd
Version range not reported
- rhosp13/openstack-dependencies
Version range not reported
- rhosp13/openstack-ec2-api
Version range not reported
- rhosp13/openstack-glance-api
Version range not reported
- rhosp13/openstack-glance-base
Version range not reported
- rhosp13/openstack-gnocchi-api
Version range not reported
- rhosp13/openstack-gnocchi-base
Version range not reported
- rhosp13/openstack-gnocchi-metricd
Version range not reported
- rhosp13/openstack-gnocchi-statsd
Version range not reported
- rhosp13/openstack-heat-all
Version range not reported
- rhosp13/openstack-heat-api
Version range not reported
- rhosp13/openstack-heat-api-cfn
Version range not reported
- rhosp13/openstack-heat-base
Version range not reported
- rhosp13/openstack-heat-engine
Version range not reported
- rhosp13/openstack-horizon
Version range not reported
- rhosp13/openstack-horizon-base
Version range not reported
- rhosp13/openstack-ironic-api
Version range not reported
- rhosp13/openstack-ironic-base
Version range not reported
- rhosp13/openstack-ironic-conductor
Version range not reported
- rhosp13/openstack-ironic-inspector
Version range not reported
- rhosp13/openstack-ironic-neutron-agent
Version range not reported
- rhosp13/openstack-ironic-pxe
Version range not reported
- rhosp13/openstack-keystone
Version range not reported
- rhosp13/openstack-keystone-base
Version range not reported
- rhosp13/openstack-manila-api
Version range not reported
- rhosp13/openstack-manila-base
Version range not reported
- rhosp13/openstack-manila-scheduler
Version range not reported
- rhosp13/openstack-manila-share
Version range not reported
- rhosp13/openstack-mistral-api
Version range not reported
- rhosp13/openstack-mistral-base
Version range not reported
- rhosp13/openstack-mistral-engine
Version range not reported
- rhosp13/openstack-mistral-event-engine
Version range not reported
- rhosp13/openstack-mistral-executor
Version range not reported
- rhosp13/openstack-neutron-base
Version range not reported
- rhosp13/openstack-neutron-dhcp-agent
Version range not reported
- rhosp13/openstack-neutron-l3-agent
Version range not reported
- rhosp13/openstack-neutron-metadata-agent
Version range not reported
- rhosp13/openstack-neutron-metadata-agent-ovn
Version range not reported
- rhosp13/openstack-neutron-openvswitch-agent
Version range not reported
- rhosp13/openstack-neutron-server
Version range not reported
- rhosp13/openstack-neutron-server-opendaylight
Version range not reported
- rhosp13/openstack-neutron-server-ovn
Version range not reported
- rhosp13/openstack-neutron-sriov-agent
Version range not reported
- rhosp13/openstack-nova-api
Version range not reported
- rhosp13/openstack-nova-base
Version range not reported
- rhosp13/openstack-nova-compute
Version range not reported
- rhosp13/openstack-nova-compute-ironic
Version range not reported
- rhosp13/openstack-nova-conductor
Version range not reported
- rhosp13/openstack-nova-consoleauth
Version range not reported
- rhosp13/openstack-nova-novncproxy
Version range not reported
- rhosp13/openstack-nova-placement-api
Version range not reported
- rhosp13/openstack-nova-scheduler
Version range not reported
- rhosp13/openstack-octavia-api
Version range not reported
- rhosp13/openstack-octavia-base
Version range not reported
- rhosp13/openstack-octavia-health-manager
Version range not reported
- rhosp13/openstack-octavia-housekeeping
Version range not reported
- rhosp13/openstack-octavia-worker
Version range not reported
- rhosp13/openstack-panko-api
Version range not reported
- rhosp13/openstack-panko-base
Version range not reported
- rhosp13/openstack-sahara-api
Version range not reported
- rhosp13/openstack-sahara-base
Version range not reported
- rhosp13/openstack-sahara-engine
Version range not reported
- rhosp13/openstack-swift-account
Version range not reported
- rhosp13/openstack-swift-base
Version range not reported
- rhosp13/openstack-swift-container
Version range not reported
- rhosp13/openstack-swift-object
Version range not reported
- rhosp13/openstack-swift-proxy-server
Version range not reported
- rhosp13/openstack-tempest
Version range not reported
- rhosp13/openstack-zaqar
Version range not reported
- python-mistralclient
Version range not reported
- rhosp-rhel8/openstack-heat-all
Version range not reported
- rhosp-rhel8/openstack-heat-api
Version range not reported
- rhosp-rhel8/openstack-heat-api-cfn
Version range not reported
- rhosp-rhel8/openstack-heat-base
Version range not reported
- rhosp-rhel8/openstack-heat-engine
Version range not reported
- rhosp-rhel8/openstack-mistral-api
Version range not reported
- rhosp-rhel8/openstack-mistral-base
Version range not reported
- rhosp-rhel8/openstack-mistral-engine
Version range not reported
- rhosp-rhel8/openstack-mistral-event-engine
Version range not reported
- rhosp-rhel8/openstack-mistral-executor
Version range not reported
- rhosp-rhel8/openstack-nova-scheduler
Version range not reported
- rhosp-rhel8/openstack-tripleoclient
Version range not reported
- python-mistralclient
Version range not reported
- rhosp-rhel8/openstack-tripleoclient
Version range not reported
- rhosp-rhel9/openstack-heat-all
Version range not reported
- rhosp-rhel9/openstack-heat-api
Version range not reported
- rhosp-rhel9/openstack-heat-api-cfn
Version range not reported
- rhosp-rhel9/openstack-heat-base
Version range not reported
- rhosp-rhel9/openstack-heat-engine
Version range not reported
- rhosp-rhel9/openstack-tripleoclient
Version range not reported
- python-mistralclientPyPI
fixed in 4.3.0