Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-29354
9.8
CRITICALCVSS v3
Published
May 16, 2022
CVSS v2
7.5 HIGH
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file.
keystonejs/keystone
GitHubThe superpowered headless CMS for Node.js — built with GraphQL and React
GitHubThe superpowered headless CMS for Node.js — built with GraphQL and React= 4.2.1NVD
openstack/keystoneGitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.
GitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.= 4.2.1NVD