CVE-2021-3654

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
n/a	openstack-nova	Affects - Nova: <21.2.3, >=22.0.0 <22.2.3, >=23.0.0 <23.0.3 \| Fixed-In 21.2.3, 22.3.0, and 23.1.0

References

https://bugs.launchpad.net/nova/+bug/1927677Exploit, Issue Tracking, Patch, Third Party Advisory
https://bugs.python.org/issue32084Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1961439Issue Tracking, Patch, Third Party Advisory
https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66Patch, Vendor Advisory
https://opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251ebPatch, Vendor Advisory
https://security.gentoo.org/glsa/202305-02
https://security.openstack.org/ossa/OSSA-2021-002.htmlPatch, Vendor Advisory
https://www.openwall.com/lists/oss-security/2021/07/29/2Mailing List, Patch, Third Party Advisory
https://bugs.launchpad.net/nova/+bug/1927677Exploit, Issue Tracking, Patch, Third Party Advisory
https://bugs.python.org/issue32084Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1961439Issue Tracking, Patch, Third Party Advisory
https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66Patch, Vendor Advisory
https://opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251ebPatch, Vendor Advisory
https://security.gentoo.org/glsa/202305-02
https://security.openstack.org/ossa/OSSA-2021-002.htmlPatch, Vendor Advisory
https://www.openwall.com/lists/oss-security/2021/07/29/2Mailing List, Patch, Third Party Advisory

Timeline

Published: Mar 2, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-365424.3Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.LockDocument.php in SeedDMS v5.1.x<5.1.23 and v6.0.x <6.0.16 allows a remote a CVE-2021-365434.3Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.UnlockDocument.php in SeedDMS v5.1.x <5.1.23 and v6.0.x <6.0.16 allows a remot CVE-2021-365447.5Incorrect Access Control issue discovered in tpcms 3.2 allows remote attackers to view sensitive information via path in application URL.CVE-2021-365455.4Cross Site Scripting (XSS) vulnerability in tpcms 3.2 allows remote attackers to run arbitrary code via the cfg_copyright or cfg_tel field i CVE-2021-365467.5Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.CVE-2021-365479.8A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitra CVE-2021-365489.8A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog of Monstra v3.0.4 CVE-2021-36553.3A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the CVE-2021-365505.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php. This vulner CVE-2021-365515.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability a CVE-2021-36568.8A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine c CVE-2021-365609.8Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of