GitHub Advisoryadvisory · PyPI

GHSA-5gp5-vxj6-4257 OpenStack Glance Inclusion of Functionality from Untrusted Control Sphere vulnerability

LOW Published 2023-03-07 Modified 2025-03-06 Official page ↗
Aliases
CVE-2022-4134
Ecosystem
PyPI
Packages
glance
Severity
Low
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-829
Reviewed
2023-03-08

Affected packages

• PyPI glance: <= 25.1.0 (no fix yet)

Description

A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.

Related

Alias · CVE (1)

  • CVE-2022-4134 A flaw was found in openstack-glance. vulnerability

Weakness · CWE (1)

  • CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness

References