CVE-2023-1625
Information leak in api
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Information leak in api
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
CVE-2023-1625- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-202
- Updated
- 2026-11-02
EUVDEUVD-2023-2428
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
EUVD-2023-2428- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5836-grcc-8j89
OpenStack Heat information leak vulnerability
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
GHSA-5836-grcc-8j89- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
CVE-2023-1625- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-202
- Updated
- 2026-11-02
OSV
Information leak in api
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
CVE-2023-1625- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-202
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-1625
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
DEBIAN-CVE-2023-1625- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
Show 7 moreShow less
OSVGHSA-5836-grcc-8j89
OpenStack Heat information leak vulnerability
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
GHSA-5836-grcc-8j89- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVPYSEC-2026-1751
OpenStack Heat information leak vulnerability
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
PYSEC-2026-1751- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-1625
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
- Record
UBUNTU-CVE-2023-1625- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L - CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2023:2378-1 No score
Security update for openstack-heat, openstack-swift, python-Werkzeug
This update for openstack-heat, openstack-swift, python-Werkzeug contains the following fixes:
Security fixes included in this update:
openstack-heat:
- CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's environment (bsc#1209774).
openstack-swift:
- CVE-2022-47950: Fixed a local file disclosure that could be triggered by an authenticated attacker by supplying a malicious XML (bnc#1207035).
python-Werkzeug:
- CVE-2023-25577: Fixed an unbounded resource usage when parsing multipart forms with many fields (bsc#1208283).
Non security changes on this update:
Changes in openstack-heat:
- Honor 'hidden' parameter in 'stack environment show' command. (bsc#1209774, CVE-2023-1625)
Changes in openstack-swift:
- Prevent XXE injections in API. (bsc#1207035, CVE-2022-47950)
Changes in python-Werkzeug;
- Limit maximum number of multipart form parts. (bsc#1208283, CVE-2023-25577)
- Record
SUSE-SU-2023:2378-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2379-1 No score
Security update for openstack-heat, python-Werkzeug
This update for openstack-heat, python-Werkzeug contains the following fixes:
Security fixes included on this update:
openstack-heat:
- CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's environment. (bsc#1209774)
python-Werkzeug:
- CVE-2023-25577: Fixed an unbounded resource usage when parsing multipart forms with many fields. (bsc#1208283)
- Record
SUSE-SU-2023:2379-1- Updated
- 2026-11-02
OSVUSN-6066-1 No score
heat vulnerability
It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data.
- Record
USN-6066-1- Updated
- 2026-11-02
OSVUSN-6293-1 No score
heat vulnerability
It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data.
- Record
USN-6293-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openstack-heatPyPI |
before 20.0.0 | 20.0.0 |
heatDebian:12 |
before 1:19.0.0-2 | 1:19.0.0-2 |
heatDebian:13 |
before 1:19.0.0-2 | 1:19.0.0-2 |
heatDebian:14 |
before 1:19.0.0-2 | 1:19.0.0-2 |
openstack-heatPyPI |
before 20.0.0, plus listed versions 11.0.0.0rc2.dev5211.0.211.0.312.0.012.0.0.0rc1 Show 34 moreShow less12.0.0.0rc212.1.012.2.013.0.013.0.0.0rc113.0.0.0rc213.0.113.0.213.1.014.0.014.0.0.0rc114.1.014.2.015.0.015.0.0.0rc115.1.016.0.016.0.0.0rc116.1.017.0.017.0.0.0rc117.0.0.0rc217.0.117.0.218.0.018.0.0.0rc118.0.119.0.019.0.0.0rc119.0.0.0rc219.0.119.0.220.0.0.0rc120.0.0.0rc2 |
20.0.0 |
openstack-heatSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 11.0.4~dev4-3.24.4 | 11.0.4~dev4-3.24.4 |
openstack-swiftSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 2.19.3~dev3-3.6.3 | 2.19.3~dev3-3.6.3 |
python-WerkzeugSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 0.14.1-3.6.2 | 0.14.1-3.6.2 |
venv-openstack-designateSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 7.0.2~dev2-3.41.2 | 7.0.2~dev2-3.41.2 |
venv-openstack-heatSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 11.0.4~dev4-3.43.2 | 11.0.4~dev4-3.43.2 |
Show 31 moreShow less
| Package | Affected | Fixed |
|---|---|---|
venv-openstack-keystoneSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 14.2.1~dev9-3.42.2 | 14.2.1~dev9-3.42.2 |
venv-openstack-magnumSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 7.2.1~dev1-4.41.3 | 7.2.1~dev1-4.41.3 |
venv-openstack-octaviaSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 3.2.3~dev7-4.41.2 | 3.2.3~dev7-4.41.2 |
venv-openstack-saharaSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 9.0.2~dev15-3.41.2 | 9.0.2~dev15-3.41.2 |
venv-openstack-swiftSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 2.19.3~dev3-2.36.3 | 2.19.3~dev3-2.36.3 |
openstack-heatSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 3 CVEs |
before 11.0.4~dev4-3.24.4 | 11.0.4~dev4-3.24.4 |
openstack-swiftSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 3 CVEs |
before 2.19.3~dev3-3.6.3 | 2.19.3~dev3-3.6.3 |
python-WerkzeugSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 3 CVEs |
before 0.14.1-3.6.2 | 0.14.1-3.6.2 |
openstack-heatSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 9.0.8~dev22-3.30.3 | 9.0.8~dev22-3.30.3 |
openstack-heat-docSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 9.0.8~dev22-3.30.3 | 9.0.8~dev22-3.30.3 |
python-WerkzeugSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 0.12.2-3.6.2 | 0.12.2-3.6.2 |
venv-openstack-designateSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 5.0.3~dev7-12.45.1 | 5.0.3~dev7-12.45.1 |
venv-openstack-heatSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 9.0.8~dev22-12.51.1 | 9.0.8~dev22-12.51.1 |
venv-openstack-magnumSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 5.0.2_5.0.2_5.0.2~dev31-11.46.1 | 5.0.2_5.0.2_5.0.2~dev31-11.46.1 |
venv-openstack-octaviaSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 1.0.6~dev3-12.47.1 | 1.0.6~dev3-12.47.1 |
venv-openstack-saharaSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 7.0.5~dev4-11.46.1 | 7.0.5~dev4-11.46.1 |
openstack-heatSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 9.0.8~dev22-3.30.3 | 9.0.8~dev22-3.30.3 |
openstack-heat-docSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 9.0.8~dev22-3.30.3 | 9.0.8~dev22-3.30.3 |
python-WerkzeugSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 0.12.2-3.6.2 | 0.12.2-3.6.2 |
venv-openstack-designateSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 5.0.3~dev7-12.45.1 | 5.0.3~dev7-12.45.1 |
venv-openstack-heatSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 9.0.8~dev22-12.51.1 | 9.0.8~dev22-12.51.1 |
venv-openstack-magnumSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 5.0.2_5.0.2_5.0.2~dev31-11.46.1 | 5.0.2_5.0.2_5.0.2~dev31-11.46.1 |
venv-openstack-octaviaSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 1.0.6~dev3-12.47.1 | 1.0.6~dev3-12.47.1 |
venv-openstack-saharaSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 7.0.5~dev4-11.46.1 | 7.0.5~dev4-11.46.1 |
openstack-heatSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 9.0.8~dev22-3.30.3 | 9.0.8~dev22-3.30.3 |
openstack-heat-docSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 9.0.8~dev22-3.30.3 | 9.0.8~dev22-3.30.3 |
python-WerkzeugSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 0.12.2-3.6.2 | 0.12.2-3.6.2 |
heatUbuntu:16.04:LTS |
All versions, plus listed versions 1:5.0.0-0ubuntu11:6.0.0~b1-0ubuntu11:6.0.0~b2-0ubuntu11:6.0.0~b2-0ubuntu21:6.0.0~b3-0ubuntu1 Show 7 moreShow less1:6.0.0~rc1-0ubuntu11:6.0.0-0ubuntu11:6.0.0-0ubuntu1.11:6.1.0-0ubuntu11:6.1.1-0ubuntu11:6.1.2-0ubuntu11:6.1.2-0ubuntu1.1 |
None known |
heatUbuntu:18.04:LTS |
before 1:10.0.2-0ubuntu1.1, plus listed versions 1:9.0.0-0ubuntu11:10.0.0~b1-0ubuntu11:10.0.0~b2-0ubuntu11:10.0.0-0ubuntu1.11:10.0.1-0ubuntu11:10.0.1-0ubuntu21:10.0.2-0ubuntu1 |
1:10.0.2-0ubuntu1.1 |
heatUbuntu:20.04:LTS |
before 1:14.2.0-0ubuntu1.1, plus listed versions 1:13.0.0-0ubuntu11:14.0.0~b1~git2019121613.7b606461e-0ubuntu11:14.0.0~b2~git2020021413.94bdcd8c9-0ubuntu21:14.0.0~b3~git2020032414.d8354d908-0ubuntu11:14.0.0~b3~git2020041012.2ef9f4bf3-0ubuntu11:14.0.0-0ubuntu0.20.04.11:14.1.0-0ubuntu11:14.2.0-0ubuntu1 |
1:14.2.0-0ubuntu1.1 |
heatUbuntu:22.04:LTS |
before 1:18.0.1-0ubuntu1.1, plus listed versions 1:17.0.0-0ubuntu11:17.0.0+git2021120816.fe8fba8c9-0ubuntu21:17.0.0+git2022011216.9af3af156-0ubuntu11:17.0.0+git2022011216.9af3af156-0ubuntu31:17.0.1+git2022030311.968969b99-0ubuntu1 Show 4 moreShow less1:18.0.0-0ubuntu11:18.0.0-0ubuntu1.11:18.0.0-0ubuntu1.21:18.0.1-0ubuntu1 |
1:18.0.1-0ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-1625 is a high vulnerability (CVSS 7.4) in Openstack Heat, published March 27, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. Fixed in openstack-heat 20.0.0.
References
access.redhat.com/security/cve/CVE-2023-1625
bugzilla.redhat.com/show_bug.cgi?id=2181621
github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb
launchpad.net/bugs/1999665
nvd.nist.gov/vuln/detail/CVE-2023-1625
Show 18 moreShow less
repos.fedorapeople.org/repos/openstack
security-tracker.debian.org/tracker/CVE-2023-1625
pypi.org/project/openstack-heat
suse.com/support/update/announcement/2023/suse-su-20232378-1
bugzilla.suse.com/1207035
ubuntu.com/security/CVE-2023-1625
cve.org/CVERecord?id=CVE-2023-1625