CVE record · 1 source
CVE-2026-97147
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's…
- Vendor
- Red Hat
- Product
- OpenStack
- Exposure class
- Hypervisor
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's…
In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite…