MEDIUM 5.9

GHSA-9v62-qx4c-44x5

OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image

Details

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.

Enter the version of the package you're using.

Introduced in: 17.0.0 Fixed in: 26.1.7

Fix pip install --upgrade 'ironic>=26.1.7'

Introduced in: 27.0.0 Fixed in: 29.0.6

Fix pip install --upgrade 'ironic>=29.0.6'

Introduced in: 30.0.0 Fixed in: 32.0.2

Fix pip install --upgrade 'ironic>=32.0.2'

Introduced in: 33.0.0 Fixed in: 35.0.2

Fix pip install --upgrade 'ironic>=35.0.2'