CVE-2024-29156

—

CVSS 3.1

6.5 medium

EPSS

<1%p53

Published

Mar 18, 2024 (Mar 18, 2024)

Modified

Jun 17, 2026

Description

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

Vendors: openstack
Products: murano, yaql
Weakness: CWE-116
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.