Executive brief
OpenStack Ironic fails to verify checksums of supplied image_source URLs
Affected products
- PyPI ironic
Junglewise Threat Intelligence
CVE-2024-47211: PYSEC-2026-1468 - OpenStack Ironic fails to verify checksums of supplied image_source URLs
CVE-2024-47211 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: ironic (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-646 - OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
- OpenStack Ironic sensitive information disclosure in volume target PATCH response
- OpenStack Ironic denial of service via crafted JSON in API endpoints
- OpenStack Ironic directory traversal in ISO image extraction
- OpenStack Ironic boot script injection via unsanitized kernel parameters