CVE-2021-4472— Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

CVSS 6.5 · Medium EPSS 0.06% · P19 Updated Feb 25, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-4472

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

Source: NVD (National Vulnerability Database)

Vulnerability Description

The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Source: NVD (National Vulnerability Database)

Vulnerability Type

文件名或路径的外部可控制

Source: NVD (National Vulnerability Database)

Vulnerability Title

openstack mistral-dashboard 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

OpenStack Mistral-Dashboard是OpenStack开源的一个图形界面插件。 openstack mistral-dashboard存在安全漏洞，该漏洞源于Create Workbook功能存在本地文件包含漏洞，可能导致任意本地文件内容泄露。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 13 (Queens)	-	`cpe:/a:redhat:openstack:13`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`

II. Public POCs for CVE-2021-4472

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2021-4472

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: Red Hat OpenStack Platform 13 (Queens)

Same vendor: Red Hat

Same weakness: CWE-73

V. Comments for CVE-2021-4472

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2021-4472— Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

I. Basic Information for CVE-2021-4472

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2021-4472

III. Intelligence Information for CVE-2021-4472

IV. Related Vulnerabilities

V. Comments for CVE-2021-4472

Leave a comment