Open Stack

** Description changed:

- This issue is being treated as a potential security risk under embargo.
- Please do not make any public mention of embargoed (private) security
- vulnerabilities before their coordinated publication by the OpenStack
- Vulnerability Management Team in the form of an official OpenStack
- Security Advisory. This includes discussion of the bug or associated
- fixes in public forums such as mailing lists, code review systems and
- bug trackers. Please also avoid private disclosure to other individuals
- not already approved for access to this information, and provide this
- same reminder to those who are made aware of the issue prior to
- publication. All discussion should remain confined to this private bug
- report, and any proposed fixes should be added to the bug as
- attachments.
- 
  The xml.dom.minidom module is not secure against maliciously constructed
  data. If you need to parse untrusted or unauthenticated data see XML
  vulnerabilities.
  
  Trove code base is using xml.dom.minidom.
  
  Writing unvalidated data into an XML document can allow an attacker to
  change the structure and contents of the  XML.
  
  https://github.com/openstack/trove/blob/129fac7d5374e18a428afa1b5c0259743677222e/trove/common/base_wsgi.py#L509

** Information type changed from Private Security to Public

** Tags added: security

** Changed in: ossa
       Status: Incomplete => Won't Fix

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1657139

Title:
  XML Injection

Status in OpenStack Security Advisory:
  Won't Fix
Status in OpenStack DBaaS (Trove):
  New

Bug description:
  The xml.dom.minidom module is not secure against maliciously
  constructed data. If you need to parse untrusted or unauthenticated
  data see XML vulnerabilities.

  Trove code base is using xml.dom.minidom.

  Writing unvalidated data into an XML document can allow an attacker to
  change the structure and contents of the  XML.

  https://github.com/openstack/trove/blob/129fac7d5374e18a428afa1b5c0259743677222e/trove/common/base_wsgi.py#L509

To manage notifications about this bug go to:
https://bugs.launchpad.net/ossa/+bug/1657139/+subscriptions