CVE-2026-34881 in Glance
摘要 (英语)
OpenStack Glance =30.0.0 <30.1.1, ==31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, the web-download and glance-download import methods are subject to this vulnerability, as is the optional (not enabled by default) ovf_process image import plugin.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
负责
MITRE
预定
2026-03-31
披露
2026-03-31
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354322 | OpenStack Glance ovf_process Image Import Plugin 权限提升 | 918 | 未定义 | 官方修复 | CVE-2026-34881 |