p PatchFirst

CVE-2021-4472

CVE-2021-4472 · Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.

CVSS 6.5 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • red hat openstack platform 13 (queens)

    No fix published

  • red hat openstack platform 16.2

    No fix published

  • red hat openstack platform 17.1

    No fix published

  • mistral-dashboard Debian:12

    Affected ranges
    • ECOSYSTEM: < 15.0.0~rc1-1

    Update to 15.0.0~rc1-1

  • mistral-dashboard Debian:13

    Affected ranges
    • ECOSYSTEM: < 15.0.0~rc1-1

    Update to 15.0.0~rc1-1

  • mistral-dashboard Debian:14

    Affected ranges
    • ECOSYSTEM: < 15.0.0~rc1-1

    Update to 15.0.0~rc1-1

  • python-mistralclient Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:4.3.0-2

    Update to 1:4.3.0-2

  • python-mistralclient Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:4.3.0-2

    Update to 1:4.3.0-2

  • python-mistralclient Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:4.3.0-2

    Update to 1:4.3.0-2

  • python-mistralclient PyPI

    Versions
    • 0
    • 0.0.1
    • 0.0.2
    • 0.0.3
    • 0.0.4
    • 0.1
    • 0.1.1
    • 0.2.0
    • 0.3.0
    • 1.0.0
    • 1.0.0.0b1
    • 1.0.1
    • 1.0.2
    • 1.1.0
    • 1.2.0
    • 2.0.0
    • 2.1.0
    • 2.1.1
    • 2.1.2
    • 3.0.0
    • 3.0.1
    • 3.0.2
    • 3.1.0
    • 3.1.1
    • 3.1.2
    • 3.1.3
    • 3.1.4
    • 3.1.5
    • 3.10.0
    • 3.2.0
    • 3.3.0
    • 3.4.0
    • 3.5.0
    • 3.6.0
    • 3.6.1
    • 3.7.0
    • 3.8.0
    • 3.8.1
    • 3.9.0
    • 4.0.0
    • 4.0.1
    • 4.1.0
    • 4.1.1
    • 4.2.0
    Affected ranges
    • ECOSYSTEM: < 4.3.0

    Update to 4.3.0

  • mistral-dashboard Ubuntu:20.04:LTS

    Versions
    • 7.0.1-2
    • 9.0.0-1
    • 9.0.0-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mistral-dashboard Ubuntu:22.04:LTS

    Versions
    • 11.0.0-2
    • 13.0.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mistral-dashboard Ubuntu:24.04:LTS

    Versions
    • 16.0.0-4
    • 17.0.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mistral-dashboard Ubuntu:25.10

    Versions
    • 20.0.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mistral-dashboard Ubuntu:26.10

    Versions
    • 20.0.0-0ubuntu2
    • 22.0.0+git20260722.13.a2c6b1c-0ubuntu1
    • 23.0.0~rc1-0ubuntu1
    • 23.0.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mistral-dashboard Ubuntu:26.04:LTS

    Versions
    • 20.0.0-0ubuntu1
    • 20.0.0-0ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →