MEDIUM 5.8

GHSA-jrh2-f5jc-xpgr

OpenStack Ironic allows Boot Script Injection

Details

OpenStack Ironic through 35.0.x allows Boot Script Injection.

Enter the version of the package you're using.

Introduced in: 17.0.0 Fixed in: 26.1.7

Fix pip install --upgrade 'ironic>=26.1.7'

Introduced in: 27.0.0 Fixed in: 29.0.6

Fix pip install --upgrade 'ironic>=29.0.6'

Introduced in: 30.0.0 Fixed in: 32.0.2

Fix pip install --upgrade 'ironic>=32.0.2'

Introduced in: 33.0.0 Fixed in: 35.0.2

Fix pip install --upgrade 'ironic>=35.0.2'