Openstack Ironic-Inspector vulnerabilities

1 known vulnerability affecting openstack/ironic-inspector.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2019-10141CRITICALCVSS 9.1fixed in 5.0.2≥ 5.1.0, < 6.0.3+3 more2019-07-30
CVE-2019-10141 [CRITICAL] CWE-89 CVE-2019-10141: A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's node_cache.find_node(). This function makes a SQL query using unfiltered data from a server reporting inspection results (by a POST to the /v1/continue endpoint).
nvd