CVE-2024-53916 Information

Description

In OpenStack Neutron through 25.0.0 neutron/extensions/tagging.py can use an incorrect ID during policy enforcement. NOTE: 935883 has the \Work in Progress\ status as of 2024-11-24.

Reference

https://github.com/openstack/neutron/blob/363ffa6e9e1ab5968f87d45bc2f1cb6394f48b9f/neutron/extensions/tagging.py#L138-L232 https://review.opendev.org/c/openstack/neutron/+/935883 https://review.opendev.org/q/project:openstack/neutron