RHSA-2024:9989MediumCVSS 6.1

Red Hat Security Advisory: RHOSP 17.1.4 (python-webob) security update

Published
November 21, 2024
Last Modified
November 1, 2026

🔗 CVE IDs covered (1)

CVE-2024-42353 →

📋 Description

CVE-2024-42353 — webob: WebOb's location header normalization during redirect leads to open redirect

🎯 Affected products3

  • Red Hat OpenStack Platform 17.1
  • python-webob-0:1.8.7-2.1.el8ost.src as a component of Red Hat OpenStack Platform 17.1
  • python3-webob-0:1.8.7-2.1.el8ost.noarch as a component of Red Hat OpenStack Platform 17.1

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: If the Response class is used, any HTTP Location header (i.e. location) can be rewritten so that it always passes a full URI that includes the hostname to redirect the user to.

🔗 References (3)