An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker...

zetlyn/cve-ghsa vulnerability ghsa GHSA-p93m-62q2-q66v cve CVE-2026-51773 known 2026-09-25

https://github.com/advisories/GHSA-p93m-62q2-q66v

Properties

cvss

cvss	8.1 receipt Source GitHub advisories Its words `8.1` Read by `field:cvss.score` Said since 2026-09-28 11:44 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-51773", "cvss": { "score": 8.1, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, "cvss_severities": { "cvss_v3": { "score": 8.1, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" } ], "description": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.", "epss": { "percentage": 0.00319, "percentile": 0.22328 }, "ghsa_id": "GHSA-p93m-62q2-q66v", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-p93m-62q2-q66v", "identifiers": [ { "type": "GHSA", "value": "GHSA-p93m-62q2-q66v" }, { "type": "CVE", "value": "CVE-2026-51773" } ], "nvd_published_at": "2026-09-25T13:17:14Z", "published_at": "2026-09-25T15:31:45Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-51773", "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773", "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773/blob/main/CVE-2026-51773.md", "https://github.com/advisories/GHSA-p93m-62q2-q66v" ], "repository_advisory_url": null, "severity": "high", "source_code_location": "", "summary": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker...", "type": "unreviewed", "updated_at": "2026-09-25T18:32:26Z", "url": "https://api.github.com/advisories/GHSA-p93m-62q2-q66v", "vulnerabilities": [], "withdrawn_at": null }
cwe	CWE-918 receipt Source GitHub advisories Its words `CWE-918` Read by `field:cwes[].cwe_id` Said since 2026-09-28 11:44 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-51773", "cvss": { "score": 8.1, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, "cvss_severities": { "cvss_v3": { "score": 8.1, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" } ], "description": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.", "epss": { "percentage": 0.00319, "percentile": 0.22328 }, "ghsa_id": "GHSA-p93m-62q2-q66v", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-p93m-62q2-q66v", "identifiers": [ { "type": "GHSA", "value": "GHSA-p93m-62q2-q66v" }, { "type": "CVE", "value": "CVE-2026-51773" } ], "nvd_published_at": "2026-09-25T13:17:14Z", "published_at": "2026-09-25T15:31:45Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-51773", "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773", "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773/blob/main/CVE-2026-51773.md", "https://github.com/advisories/GHSA-p93m-62q2-q66v" ], "repository_advisory_url": null, "severity": "high", "source_code_location": "", "summary": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker...", "type": "unreviewed", "updated_at": "2026-09-25T18:32:26Z", "url": "https://api.github.com/advisories/GHSA-p93m-62q2-q66v", "vulnerabilities": [], "withdrawn_at": null }
severity	high From 7.0 to 8.9. receipt Source GitHub advisories Its words `high` Read by `field:severity` Said since 2026-09-28 11:44 UTC Last answered 2026-10-05 12:22 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-51773", "cvss": { "score": 8.1, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, "cvss_severities": { "cvss_v3": { "score": 8.1, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" } ], "description": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.", "epss": { "percentage": 0.00319, "percentile": 0.22328 }, "ghsa_id": "GHSA-p93m-62q2-q66v", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-p93m-62q2-q66v", "identifiers": [ { "type": "GHSA", "value": "GHSA-p93m-62q2-q66v" }, { "type": "CVE", "value": "CVE-2026-51773" } ], "nvd_published_at": "2026-09-25T13:17:14Z", "published_at": "2026-09-25T15:31:45Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-51773", "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773", "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773/blob/main/CVE-2026-51773.md", "https://github.com/advisories/GHSA-p93m-62q2-q66v" ], "repository_advisory_url": null, "severity": "high", "source_code_location": "", "summary": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker...", "type": "unreviewed", "updated_at": "2026-09-25T18:32:26Z", "url": "https://api.github.com/advisories/GHSA-p93m-62q2-q66v", "vulnerabilities": [], "withdrawn_at": null }

8.1

receipt

Source: GitHub advisories
Its words: 8.1
Read by: field:cvss.score
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-51773",
  "cvss": {
    "score": 8.1,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 8.1,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-918",
      "name": "Server-Side Request Forgery (SSRF)"
    }
  ],
  "description": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.",
  "epss": {
    "percentage": 0.00319,
    "percentile": 0.22328
  },
  "ghsa_id": "GHSA-p93m-62q2-q66v",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-p93m-62q2-q66v",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-p93m-62q2-q66v"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-51773"
    }
  ],
  "nvd_published_at": "2026-09-25T13:17:14Z",
  "published_at": "2026-09-25T15:31:45Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-51773",
    "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773",
    "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773/blob/main/CVE-2026-51773.md",
    "https://github.com/advisories/GHSA-p93m-62q2-q66v"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker...",
  "type": "unreviewed",
  "updated_at": "2026-09-25T18:32:26Z",
  "url": "https://api.github.com/advisories/GHSA-p93m-62q2-q66v",
  "vulnerabilities": [],
  "withdrawn_at": null
}

cwe

CWE-918

receipt

Source: GitHub advisories
Its words: CWE-918
Read by: field:cwes[].cwe_id
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-51773",
  "cvss": {
    "score": 8.1,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 8.1,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-918",
      "name": "Server-Side Request Forgery (SSRF)"
    }
  ],
  "description": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.",
  "epss": {
    "percentage": 0.00319,
    "percentile": 0.22328
  },
  "ghsa_id": "GHSA-p93m-62q2-q66v",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-p93m-62q2-q66v",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-p93m-62q2-q66v"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-51773"
    }
  ],
  "nvd_published_at": "2026-09-25T13:17:14Z",
  "published_at": "2026-09-25T15:31:45Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-51773",
    "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773",
    "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773/blob/main/CVE-2026-51773.md",
    "https://github.com/advisories/GHSA-p93m-62q2-q66v"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker...",
  "type": "unreviewed",
  "updated_at": "2026-09-25T18:32:26Z",
  "url": "https://api.github.com/advisories/GHSA-p93m-62q2-q66v",
  "vulnerabilities": [],
  "withdrawn_at": null
}

severity

high

From 7.0 to 8.9.

receipt

Source: GitHub advisories
Its words: high
Read by: field:severity
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-05 12:22 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-51773",
  "cvss": {
    "score": 8.1,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 8.1,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-918",
      "name": "Server-Side Request Forgery (SSRF)"
    }
  ],
  "description": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.",
  "epss": {
    "percentage": 0.00319,
    "percentile": 0.22328
  },
  "ghsa_id": "GHSA-p93m-62q2-q66v",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-p93m-62q2-q66v",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-p93m-62q2-q66v"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-51773"
    }
  ],
  "nvd_published_at": "2026-09-25T13:17:14Z",
  "published_at": "2026-09-25T15:31:45Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-51773",
    "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773",
    "https://github.com/sadandbset/CVE-2026-51772-CVE-2026-51773/blob/main/CVE-2026-51773.md",
    "https://github.com/advisories/GHSA-p93m-62q2-q66v"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker...",
  "type": "unreviewed",
  "updated_at": "2026-09-25T18:32:26Z",
  "url": "https://api.github.com/advisories/GHSA-p93m-62q2-q66v",
  "vulnerabilities": [],
  "withdrawn_at": null
}

Text

An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker... An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the _retry_request function fails to validate the destination host before attaching sensitive authentication headers.