Openstack · Openstack Nova · CVE-2021-3654
**Name of the Vulnerable Software and Affected Versions**
openstack-nova (affected versions not specified)
**Description**
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL. This issue is also related to CPython, which is used by openstack-nova's console proxy.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.