CVE-2021-3654CWE-601

A vulnerability was found in openstack-nova's console proxy, noVNC

published March 2, 2022

CVSS
—
EPSS
27%
Percentile
98.0
In the wild
Unconfirmed
What it is

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.26792 · 98.0th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-03-02T00:00Z
EPSS history
Timeline
  • 02 MAR 00:00Z
    A vulnerability was found in openstack-nova's console proxy, noVNC
    cvelistv5