Description (CNA)
In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JSON-RPC service and effect a service crash.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenStack / Ironic | unknown 32.0.0 before 37.0.0 |
CWE
CWE-770
References
ADP enrichment
No English description supplied.
No English description supplied.
A flaw was found in OpenStack Ironic. An unauthenticated malicious user could exploit this vulnerability by submitting a specially crafted JSON (JavaScript Object Notation) string to certain API (Application Programming Interface) or JSON-RPC (Remote Procedure Call) service endpoints. This could lead to a service crash, resulting in a Denial of Service (DoS) for affected systems.