CVE-2021-4472CWE-73

Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

Medium · published November 26, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
39.0
In the wild
Unconfirmed
What it is

The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00461 · 39.0th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-11-26T18:31Z
EPSS history
Timeline
  • 26 NOV 18:31Z
    Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature
    cvelistv5