Every CVE Search/ Get API key

CVE-2021-3654

Open Redirect in CPython that affects users of OpenStack Nova

6.1 MediumFix available

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

26.8%Up 25.8 points since Mar 3, 2022
90%50%10%1%

What each source reports

NVD Score used 6.1

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
CVE-2021-3654
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.0 MediumAV:N/AC:H/Au:N/C:P/I:P/A:N
Weakness
CWE-601
Updated
2026-11-02
CVE List No score

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
CVE-2021-3654
Weakness
CWE-601
Updated
2026-11-02
EUVDEUVD-2022-1552 No score

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
EUVD-2022-1552
Updated
2026-11-03
GitHub AdvisoriesGHSA-vqp6-j452-j6wp 6.1

Open Redirect in CPython that affects users of OpenStack Nova

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
GHSA-vqp6-j452-j6wp
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-601
Updated
2026-11-02
OSV 6.1

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
CVE-2021-3654
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2021-3654 6.1

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
DEBIAN-CVE-2021-3654
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 6 moreShow less
OSVGHSA-vqp6-j452-j6wp 6.1

Open Redirect in CPython that affects users of OpenStack Nova

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
GHSA-vqp6-j452-j6wp
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-601
Updated
2026-11-02
OSVPYSEC-2026-693 6.1

Open Redirect in CPython that affects users of OpenStack Nova

A vulnerability was found in CPython which is used by openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
PYSEC-2026-693
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2022:0983 5.7

Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (openstack-nova) security update

Record
RHSA-2022:0983
CVSS 3.1
5.7 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2022:0999 5.7

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-nova) security update

Record
RHSA-2022:0999
CVSS 3.1
5.7 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2021-3654 6.1

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Record
UBUNTU-CVE-2021-3654
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVUSN-5866-1 No score

nova vulnerabilities

It was discovered that Nova did not properly manage data logged into the log file. An attacker with read access to the service's logs could exploit this issue and may obtain sensitive information. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2015-9543)

It was discovered that Nova did not properly handle attaching and reattaching the encrypted volume. An attacker could possibly use this issue to perform a denial of service attack. This issue only affected Ubuntu 16.04 ESM. (CVE-2017-18191)

It was discovered that Nova did not properly handle the updation of domain XML after live migration. An attacker could possibly use this issue to corrupt the volume or perform a denial of service attack. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-17376)

It was discovered that Nova was not properly validating the URL passed to noVNC. An attacker could possibly use this issue by providing malicious URL to the noVNC proxy to redirect to any desired URL. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2021-3654)

It was discovered that Nova did not properly handle changes in the neutron port of vnic_type type. An authenticated user could possibly use this issue to perform a denial of service attack. This issue only affected Ubuntu 20.04 LTS. (CVE-2022-37394)

Record
USN-5866-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nova
PyPI
 before 21.2.3
21.2.3
nova
PyPI
 22.0.0 up to 22.2.3
22.2.3
nova
PyPI
 23.0.0 up to 23.0.3
23.0.3
nova
Debian:12
 before 2:23.0.2-3
2:23.0.2-3
nova
Debian:13
 before 2:23.0.2-3
2:23.0.2-3
nova
Debian:14
 before 2:23.0.2-3
2:23.0.2-3
nova
PyPI
 before 21.2.3, plus listed versions
15.1.516.1.616.1.716.1.817.0.10
Show 45 moreShow less
17.0.1117.0.1217.0.1317.0.717.0.817.0.918.0.218.0.318.1.018.2.018.2.118.2.218.2.318.3.019.0.019.0.0.0rc119.0.0.0rc219.0.119.0.219.0.319.1.019.2.019.3.019.3.119.3.220.0.020.0.0.0rc120.0.0.0rc220.0.120.1.020.1.120.2.020.3.020.4.020.4.120.5.020.6.020.6.121.0.021.0.0.0rc121.0.0.0rc221.1.021.1.121.1.221.2.0
21.2.3
nova
PyPI
 22.0.0 up to 22.2.3, plus listed versions
22.0.122.1.022.2.022.2.122.2.2
22.2.3
nova
PyPI
 23.0.0 up to 23.0.3, plus listed versions
23.0.123.0.2
23.0.3
nova
PyPI
 before 21.2.3, 22.0.0 up to 22.2.3, 23.0.0 up to 23.0.3, plus listed versions
15.1.516.1.616.1.716.1.817.0.10
Show 45 moreShow less
17.0.1117.0.1217.0.1317.0.717.0.817.0.918.0.218.0.318.1.018.2.018.2.118.2.218.2.318.3.019.0.019.0.0.0rc119.0.0.0rc219.0.119.0.219.0.319.1.019.2.019.3.019.3.119.3.220.0.020.0.0.0rc120.0.0.0rc220.0.120.1.020.1.120.2.020.3.020.4.020.4.120.5.020.6.020.6.121.0.021.0.0.0rc121.0.0.0rc221.1.021.1.121.1.221.2.0
21.2.322.2.323.0.3
Show 30 moreShow less
Affected packages
PackageAffectedFixed
openstack-nova
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-api
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-common
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-compute
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-conductor
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-console
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-migration
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-novncproxy
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-scheduler
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-serialproxy
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova-spicehtml5proxy
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
python3-nova
Red Hat:openstack:16.1::el8
 before 1:20.4.1-1.20220112153422.1ee93b9.el8ost
1:20.4.1-1.20220112153422.1ee93b9.el8ost
openstack-nova
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-api
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-common
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-compute
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-conductor
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-console
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-migration
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-novncproxy
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-scheduler
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-serialproxy
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
openstack-nova-spicehtml5proxy
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
python3-nova
Red Hat:openstack:16.2::el8
 before 1:20.6.2-2.20220112164912.8906554.el8ost
1:20.6.2-2.20220112164912.8906554.el8ost
nova
Ubuntu:Pro:16.04:LTS
 before 2:13.1.4-0ubuntu4.5+esm1, plus listed versions
2:12.0.0-0ubuntu22:13.0.0~b1-0ubuntu12:13.0.0~b2-0ubuntu12:13.0.0~b3-0ubuntu12:13.0.0~rc1-0ubuntu1
Show 18 moreShow less
2:13.0.0~rc3-0ubuntu12:13.0.0-0ubuntu12:13.0.0-0ubuntu22:13.0.0-0ubuntu52:13.1.0-0ubuntu12:13.1.1-0ubuntu12:13.1.1-0ubuntu1.12:13.1.2-0ubuntu22:13.1.3-0ubuntu12:13.1.3-0ubuntu22:13.1.4-0ubuntu12:13.1.4-0ubuntu22:13.1.4-0ubuntu32:13.1.4-0ubuntu4.12:13.1.4-0ubuntu4.22:13.1.4-0ubuntu4.32:13.1.4-0ubuntu4.42:13.1.4-0ubuntu4.5
2:13.1.4-0ubuntu4.5+esm1
nova
Ubuntu:18.04:LTS
 before 2:17.0.13-0ubuntu5.3, plus listed versions
2:16.0.1-0ubuntu12:16.0.1-0ubuntu22:17.0.0~b1-0ubuntu12:17.0.0~b2-0ubuntu22:17.0.0~b3-0ubuntu3
Show 25 moreShow less
2:17.0.0~b3-0ubuntu42:17.0.0~rc1-0ubuntu12:17.0.0~rc2-0ubuntu12:17.0.0~rc3-0ubuntu12:17.0.0-0ubuntu12:17.0.1-0ubuntu12:17.0.3-0ubuntu12:17.0.4-0ubuntu12:17.0.5-0ubuntu12:17.0.5-0ubuntu22:17.0.6-0ubuntu12:17.0.7-0ubuntu12:17.0.7-0ubuntu22:17.0.9-0ubuntu12:17.0.9-0ubuntu32:17.0.10-0ubuntu22:17.0.10-0ubuntu2.12:17.0.11-0ubuntu12:17.0.12-0ubuntu12:17.0.13-0ubuntu12:17.0.13-0ubuntu22:17.0.13-0ubuntu32:17.0.13-0ubuntu42:17.0.13-0ubuntu52:17.0.13-0ubuntu5.2
2:17.0.13-0ubuntu5.3
nova
Ubuntu:20.04:LTS
 before 2:21.2.4-0ubuntu2.1, plus listed versions
2:20.0.0-0ubuntu12:21.0.0~b1~git2019120415.45fb747c98-0ubuntu12:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu22:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu42:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5
Show 12 moreShow less
2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu22:21.0.0-0ubuntu0.20.04.12:21.0.0-0ubuntu0.20.04.22:21.1.0-0ubuntu12:21.1.1-0ubuntu22:21.1.2-0ubuntu12:21.2.0-0ubuntu12:21.2.1-0ubuntu12:21.2.2-0ubuntu12:21.2.3-0ubuntu12:21.2.4-0ubuntu12:21.2.4-0ubuntu2
2:21.2.4-0ubuntu2.1
nova
Ubuntu:Pro:16.04:LTS
From an advisory covering 5 CVEs
 before 2:13.1.4-0ubuntu4.5+esm1, plus listed versions
2:12.0.0-0ubuntu22:13.0.0~b1-0ubuntu12:13.0.0~b2-0ubuntu12:13.0.0~b3-0ubuntu12:13.0.0~rc1-0ubuntu1
Show 18 moreShow less
2:13.0.0~rc3-0ubuntu12:13.0.0-0ubuntu12:13.0.0-0ubuntu22:13.0.0-0ubuntu52:13.1.0-0ubuntu12:13.1.1-0ubuntu12:13.1.1-0ubuntu1.12:13.1.2-0ubuntu22:13.1.3-0ubuntu12:13.1.3-0ubuntu22:13.1.4-0ubuntu12:13.1.4-0ubuntu22:13.1.4-0ubuntu32:13.1.4-0ubuntu4.12:13.1.4-0ubuntu4.22:13.1.4-0ubuntu4.32:13.1.4-0ubuntu4.42:13.1.4-0ubuntu4.5
2:13.1.4-0ubuntu4.5+esm1
nova
Ubuntu:18.04:LTS
From an advisory covering 5 CVEs
 before 2:17.0.13-0ubuntu5.3, plus listed versions
2:16.0.1-0ubuntu12:16.0.1-0ubuntu22:17.0.0~b1-0ubuntu12:17.0.0~b2-0ubuntu22:17.0.0~b3-0ubuntu3
Show 25 moreShow less
2:17.0.0~b3-0ubuntu42:17.0.0~rc1-0ubuntu12:17.0.0~rc2-0ubuntu12:17.0.0~rc3-0ubuntu12:17.0.0-0ubuntu12:17.0.1-0ubuntu12:17.0.3-0ubuntu12:17.0.4-0ubuntu12:17.0.5-0ubuntu12:17.0.5-0ubuntu22:17.0.6-0ubuntu12:17.0.7-0ubuntu12:17.0.7-0ubuntu22:17.0.9-0ubuntu12:17.0.9-0ubuntu32:17.0.10-0ubuntu22:17.0.10-0ubuntu2.12:17.0.11-0ubuntu12:17.0.12-0ubuntu12:17.0.13-0ubuntu12:17.0.13-0ubuntu22:17.0.13-0ubuntu32:17.0.13-0ubuntu42:17.0.13-0ubuntu52:17.0.13-0ubuntu5.2
2:17.0.13-0ubuntu5.3
nova
Ubuntu:20.04:LTS
From an advisory covering 5 CVEs
 before 2:21.2.4-0ubuntu2.2, plus listed versions
2:20.0.0-0ubuntu12:21.0.0~b1~git2019120415.45fb747c98-0ubuntu12:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu22:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu42:21.0.0~b2~git2020021008.1fcd74730d-0ubuntu5
Show 13 moreShow less
2:21.0.0~b3~git2020041013.57ff308d6d-0ubuntu22:21.0.0-0ubuntu0.20.04.12:21.0.0-0ubuntu0.20.04.22:21.1.0-0ubuntu12:21.1.1-0ubuntu22:21.1.2-0ubuntu12:21.2.0-0ubuntu12:21.2.1-0ubuntu12:21.2.2-0ubuntu12:21.2.3-0ubuntu12:21.2.4-0ubuntu12:21.2.4-0ubuntu22:21.2.4-0ubuntu2.1
2:21.2.4-0ubuntu2.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
NucleiNova noVNC - Open Redirect

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, Nuclei, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3654 is a medium vulnerability (CVSS 6.1) in Openstack Nova, published March 2, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 26.8%, the 98th percentile. Fixed in nova 21.2.3.

References

Show 36 moreShow less
This page doesn't list everything

Left out here: 11 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open