ironic vulnerabilities (PyPI)
9 vulnerabilities.
-
ironicPyPI OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties 6.8 Medium -
ironicPyPI OpenStack Ironic: Crafted JSON String to Certain Endpoints on the API or JSON-RPC Service May Result in Service Crash 5.3 Medium -
ironicPyPI OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image 5.9 Medium -
ironicPyPI OpenStack Ironic allows Boot Script Injection 5.8 Medium -
ironicPyPI OpenStack Ironic: Pre-Validation Checksum Calculation allows Denial of Service (DoS) via Infinite Block Devices 4.3 Medium -
ironicPyPI OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere 6.6 Medium -
ironicPyPI OpenStack Ironic fails to restrict paths used for file:// image URLs 2.8 Low -
ironicPyPI OpenStack Ironic fails to verify checksums of supplied image_source URLs 5.3 Medium -
ironicPyPI OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor 7.5 High