CVE-2019-10141P3CRITICALCVSS 9.1fixed in 5.0.2·≥ 5.1.0, < 6.0.3+3 more2019-07-30
CVE-2019-10141 [CRITICAL] CWE-89 CVE-2019-10141: A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4,
A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint).
ghsanvdosv