CVE-2024-7319
Openstack-heat: incomplete fix for cve-2023-1625
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Openstack-heat: incomplete fix for cve-2023-1625
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
CVE-2024-7319- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2024-2462
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
EUVD-2024-2462- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2fqr-cx7q-3ph8
openstack-heat may disclose sensitive information
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
GHSA-2fqr-cx7q-3ph8- CVSS 4.0
- 5.3 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L - CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
CVE-2024-7319- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
Openstack-heat: incomplete fix for cve-2023-1625
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
CVE-2024-7319- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-03
OSVDEBIAN-CVE-2024-7319
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
DEBIAN-CVE-2024-7319- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
OSVGHSA-2fqr-cx7q-3ph8
openstack-heat may disclose sensitive information
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
GHSA-2fqr-cx7q-3ph8- CVSS 4.0
- 5.3 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L - CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVPYSEC-2026-1750
openstack-heat may disclose sensitive information
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
PYSEC-2026-1750- CVSS 4.0
- 5.3 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L - CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-7319
An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.
- Record
UBUNTU-CVE-2024-7319- CVSS 3.1
- 5.0 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openstack-heatPyPI |
through 22.0.1 | None known |
heatDebian:12 |
All versions, plus listed versions 1:19.0.0-31:20.0.0-11:20.0.0-21:20.0.0-31:20.0.0-4 Show 43 moreShow less1:20.0.0~rc1-11:20.0.0~rc1-21:21.0.0-11:21.0.0-21:21.0.0-31:21.0.0-41:21.0.0~rc1-11:22.0.0-11:22.0.0-21:22.0.0-31:22.0.0-41:22.0.0~rc1-11:23.0.0-11:23.0.0-21:23.0.0-31:23.0.0-41:23.0.0-51:23.0.0~rc1-11:23.0.0~rc1-21:24.0.0-11:24.0.0-21:24.0.0~rc1-11:24.0.0~rc1-21:25.0.0-11:25.0.0-21:25.0.0-31:25.0.0-41:25.0.0~rc1-11:25.0.0~rc1-21:25.0.0~rc1-31:25.0.0~rc1-41:25.0.0~rc1-51:26.0.0-11:26.0.0-21:26.0.0~rc1-11:26.0.0~rc1-21:26.0.1-11:27.0.0-11:27.0.0-21:27.0.0-31:27.0.0-41:27.0.0~rc1-11:27.0.0~rc1-2 |
None known |
heatDebian:13 |
All versions, plus listed versions 1:24.0.0-21:25.0.0-11:25.0.0-21:25.0.0-31:25.0.0-4 Show 16 moreShow less1:25.0.0~rc1-11:25.0.0~rc1-21:25.0.0~rc1-31:25.0.0~rc1-41:25.0.0~rc1-51:26.0.0-11:26.0.0-21:26.0.0~rc1-11:26.0.0~rc1-21:26.0.1-11:27.0.0-11:27.0.0-21:27.0.0-31:27.0.0-41:27.0.0~rc1-11:27.0.0~rc1-2 |
None known |
heatDebian:14 |
All versions, plus listed versions 1:24.0.0-21:25.0.0-11:25.0.0-21:25.0.0-31:25.0.0-4 Show 16 moreShow less1:25.0.0~rc1-11:25.0.0~rc1-21:25.0.0~rc1-31:25.0.0~rc1-41:25.0.0~rc1-51:26.0.0-11:26.0.0-21:26.0.0~rc1-11:26.0.0~rc1-21:26.0.1-11:27.0.0-11:27.0.0-21:27.0.0-31:27.0.0-41:27.0.0~rc1-11:27.0.0~rc1-2 |
None known |
openstack-heatPyPI |
through 22.0.1, plus listed versions 11.0.0.0rc2.dev5211.0.211.0.312.0.012.0.0.0rc1 Show 41 moreShow less12.0.0.0rc212.1.012.2.013.0.013.0.0.0rc113.0.0.0rc213.0.113.0.213.1.014.0.014.0.0.0rc114.1.014.2.015.0.015.0.0.0rc115.1.016.0.016.0.0.0rc116.1.017.0.017.0.0.0rc117.0.0.0rc217.0.117.0.218.0.018.0.0.0rc118.0.119.0.019.0.0.0rc119.0.0.0rc219.0.119.0.220.0.020.0.0.0rc120.0.0.0rc220.0.121.0.021.0.0.0rc121.0.122.0.022.0.0.0rc1 |
None known |
heatUbuntu:16.04:LTS |
All versions, plus listed versions 1:5.0.0-0ubuntu11:6.0.0~b1-0ubuntu11:6.0.0~b2-0ubuntu11:6.0.0~b2-0ubuntu21:6.0.0~b3-0ubuntu1 Show 7 moreShow less1:6.0.0~rc1-0ubuntu11:6.0.0-0ubuntu11:6.0.0-0ubuntu1.11:6.1.0-0ubuntu11:6.1.1-0ubuntu11:6.1.2-0ubuntu11:6.1.2-0ubuntu1.1 |
None known |
heatUbuntu:18.04:LTS |
All versions, plus listed versions 1:9.0.0-0ubuntu11:10.0.0~b1-0ubuntu11:10.0.0~b2-0ubuntu11:10.0.0-0ubuntu1.11:10.0.1-0ubuntu11:10.0.1-0ubuntu21:10.0.2-0ubuntu11:10.0.2-0ubuntu1.1 |
None known |
heatUbuntu:20.04:LTS |
All versions, plus listed versions 1:13.0.0-0ubuntu11:14.0.0~b1~git2019121613.7b606461e-0ubuntu11:14.0.0~b2~git2020021413.94bdcd8c9-0ubuntu21:14.0.0~b3~git2020032414.d8354d908-0ubuntu11:14.0.0~b3~git2020041012.2ef9f4bf3-0ubuntu1 Show 5 moreShow less1:14.0.0-0ubuntu0.20.04.11:14.1.0-0ubuntu11:14.2.0-0ubuntu11:14.2.0-0ubuntu1.11:14.2.0-0ubuntu2 |
None known |
heatUbuntu:22.04:LTS |
All versions, plus listed versions 1:17.0.0-0ubuntu11:17.0.0+git2021120816.fe8fba8c9-0ubuntu21:17.0.0+git2022011216.9af3af156-0ubuntu11:17.0.0+git2022011216.9af3af156-0ubuntu31:17.0.1+git2022030311.968969b99-0ubuntu1 Show 8 moreShow less1:18.0.0-0ubuntu11:18.0.0-0ubuntu1.11:18.0.0-0ubuntu1.21:18.0.1-0ubuntu11:18.0.1-0ubuntu1.11:18.0.1-0ubuntu1.21:18.0.1-0ubuntu1.31:18.0.1-0ubuntu1.4 |
None known |
heatUbuntu:24.04:LTS |
All versions, plus listed versions 1:21.0.0-0ubuntu21:21.0.0-0ubuntu31:21.0.0+git2024011916.2df46d4c-0ubuntu11:22.0.0~rc1-0ubuntu11:22.0.0-0ubuntu1 Show 6 moreShow less1:22.0.0-0ubuntu21:22.0.1-0ubuntu11:22.0.1-0ubuntu1.11:22.0.1-0ubuntu1.21:22.0.1-0ubuntu1.31:22.0.1-0ubuntu1.4 |
None known |
heatUbuntu:25.10 |
All versions, plus listed versions 1:24.0.0-0ubuntu11:25.0.0-0ubuntu1 |
None known |
heatUbuntu:26.10 |
All versions, plus listed versions 1:26.0.0-0ubuntu11:26.0.0-0ubuntu21:26.0.0-0ubuntu31:26.0.0+git20260814.107.c4a566c-0ubuntu11:27.0.0~rc1-0ubuntu11:27.0.0-0ubuntu1 |
None known |
heatUbuntu:26.04:LTS |
All versions, plus listed versions 1:25.0.0-0ubuntu11:25.0.0+git20260124.b471f4a-0ubuntu11:26.0.0~rc1-0ubuntu11:26.0.0-0ubuntu11:26.0.0-0ubuntu1.11:26.0.0-0ubuntu1.2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-7319 is a medium vulnerability (CVSS 5.0) in Openstack Heat, published August 2, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.