Orta CVSS 6.8
CVE-2026-55748: Horizon: işletim sistemi komut enjeksiyonu
Açıklama (NVD)
OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types of user error, not a vulnerability.
Özet bilgiler
- Ürün
- Openstack Horizon
- CVSS v3.1
- 6.8
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,25 (yüzdelik 17)
- CWE
- CWE-78
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| openstack-horizon | 8.0.0 | — | 25.3.3 |
| openstack-horizon | 25.4.0 | — | 25.5.3 |
| openstack-horizon | 25.6.0 | — | 25.7.4 |