VDB
EN
CRITICAL 9.9

GHSA-9hfw-w3f4-c4p8

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

상세

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / mistral
최초 영향 버전: 20.0.0 수정 버전: 20.1.1
수정 pip install --upgrade 'mistral>=20.1.1'
PyPI / mistral

No fixed version published yet for mistral (pip). Pin to a known-safe version or switch to an alternative.

PyPI / mistral

No fixed version published yet for mistral (pip). Pin to a known-safe version or switch to an alternative.

참고