.. / CVE-2021-3654

Exploit for Nova noVNC - Open Redirect (CVE-2021-3654)

Description:

Nova noVNC contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

Nuclei Template

View the template here CVE-2021-3654.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-3654.yaml
Copy

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3654
https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66
https://nvd.nist.gov/vuln/detail/CVE-2021-3654
https://bugs.python.org/issue32084
https://seclists.org/oss-sec/2021/q3/188