CVE-2024-7319: Openstack Heat

Medium severity, CVSS 5.0. EPSS: 0.4% chance of exploitation in the next 30 days.

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.

Affected products

• Openstack Heat: affected versions not specified
• Red Hat Openstack Platform: version 13.0 only; version 16.1 only; version 16.2 only; version 17.0 only

Published 2024-08-02. Last modified 2026-06-17.