CVE-2021-4472

Description

The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://access.redhat.com/security/cve/CVE-2021-4472 ↗
• https://bugs.launchpad.net/horizon/+bug/1931558 ↗
• https://bugzilla.redhat.com/show_bug.cgi?id=2417321 ↗
• https://review.opendev.org/c/openstack/mistral-dashboard/+/800952 ↗
• https://review.opendev.org/c/openstack/python-mistralclient/+/800950 ↗
• https://lists.debian.org/debian-lts-announce/2025/12/msg00002.html ↗
• https://lists.debian.org/debian-lts-announce/2025/12/msg00003.html ↗