Comment 1 for bug 1988302

Revision history for this message
Jeremy Stanley (fungi) wrote :

Since this report concerns a possible security risk, an incomplete
security advisory task has been added while the core security
reviewers for the affected project or projects confirm the bug and
discuss the scope of any vulnerability along with potential
solutions.

This report sounds strikingly similar to "OSSA-2021-002: Open Redirect in noVNC proxy" which we published in July of last year. What version of Nova did you encounter the problem in?

https://security.openstack.org/ossa/OSSA-2021-002.html