RedHatRHSA-2024:6775(RHSA-2024:6775) Moderate: Red Hat OpenStack Platform 18.0 (python-webob) security update
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
Low
WebOb provides wrappers around the WSGI request environment, and an object
to help create WSGI responses. The objects map much of the specified
behavior of HTTP, including header parsing and accessors for other standard
parts of the environment.
Security Fix(es):
- WebOb’s location header normalization during redirect leads to open
redirect (CVE-2024-42353)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | noarch | python3-webob | < 1.8.7-3.el9ost | python3-webob-1.8.7-3.el9ost.noarch.rpm |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
Low