CVE-2017-7200: OpenStack Glance Server-Side Request Forgery (SSRF)

May 17, 2022 (updated May 14, 2024)

An SSRF issue was discovered in OpenStack Glance before Newton. The ‘copy_from’ feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as ‘http://localhost:22’. This could then allow an attacker to enumerate internal network details while appearing masked, since the scan would appear to originate from the Glance Image service.

References

bugs.launchpad.net/ossn/+bug/1153614
bugs.launchpad.net/ossn/+bug/1606495
github.com/advisories/GHSA-j6mr-cm6x-h6jg
github.com/openstack/glance
github.com/openstack/glance/commit/b1ac90f7914d91b25144cc4063fa994fb5019ee3
nvd.nist.gov/vuln/detail/CVE-2017-7200
wiki.openstack.org/wiki/OSSN/OSSN-0078

Code Behaviors & Features

Detect and mitigate CVE-2017-7200 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →