A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Apr 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 23, 2020 |
| Centos_linux | — | Upgrade librgw-develUpgrade python3-cephfs-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-common-debuginfoUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-proxyUpgrade python3-rbdUpgrade ceph-mdsUpgrade ceph-radosgw-debuginfoUpgrade ceph-selinuxUpgrade libradosstriper1Upgrade python3-rgwUpgrade libcephfs2Upgrade python3-rados-debuginfoUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade ceph-test-debuginfoUpgrade python-rgwUpgrade ceph-debugsourceUpgrade python3-cephfsUpgrade librgw2Upgrade python3-ceph-argparseUpgrade ceph-ansibleUpgrade librgw2-debuginfoUpgrade python3-radosUpgrade nfs-ganeshaUpgrade nfs-ganesha-debugsourceUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-medicUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-debuginfoUpgrade python-ceph-argparseUpgrade ceph-radosgwUpgrade ceph-mds-debuginfoUpgrade cockpit-ceph-installerUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-fuseUpgrade libradospp-develUpgrade rbd-fuse-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-rados-urlsUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade libcephfs-develUpgrade ceph-commonUpgrade ceph-baseUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade librados-develUpgrade python3-rbd-debuginfoUpgrade ceph-base-debuginfoUpgrade rbd-mirror-debuginfoUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-debuginfoUpgrade rbd-mirrorUpgrade python-cephfsUpgrade nfs-ganesha-vfsUpgrade librbd-develUpgrade rbd-nbd-debuginfoUpgrade librados-devel-debuginfo | Dec 14, 2020 | Apr 23, 2020 |
| Debian | — | Upgrade ceph | Apr 13, 2020 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ceph-commonUpgrade python-rbdUpgrade librbd1Upgrade librados2Upgrade python-rados | Feb 24, 2022 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade librbd1Upgrade librados2Upgrade python-rbdUpgrade ceph-commonUpgrade python-rados | Sep 7, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librados2Upgrade python-radosUpgrade python-rbdUpgrade librbd1 | Apr 26, 2022 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade libcephfs-develUpgrade libcephfs2-debuginfoUpgrade libcephfs2Upgrade ceph-radosgw-debuginfoUpgrade ceph-commonUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-rgwUpgrade ceph-medicUpgrade python3-cephfs-debuginfoUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-proxyUpgrade python3-radosUpgrade rbd-fuse-debuginfoUpgrade librgw-develUpgrade ceph-debugsourceUpgrade nfs-ganesha-rgwUpgrade librados-develUpgrade nfs-ganesha-vfs-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python3-ceph-argparseUpgrade nfs-ganesha-debuginfoUpgrade python-rgwUpgrade libradosstriper1Upgrade nfs-ganesha-rados-urlsUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python-cephfsUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-test-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-debugsourceUpgrade python3-cephfsUpgrade python3-rgw-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-vfsUpgrade ceph-selinuxUpgrade libradosstriper1-debuginfoUpgrade rbd-nbdUpgrade ceph-osd-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-radosgwUpgrade librbd-develUpgrade nfs-ganesha-rados-graceUpgrade ceph-baseUpgrade ceph-mds-debuginfoUpgrade libradospp-develUpgrade python-ceph-argparseUpgrade ceph-ansibleUpgrade ceph-debuginfoUpgrade nfs-ganesha-cephUpgrade python3-rados-debuginfoUpgrade python3-rbdUpgrade ceph-fuseUpgrade ceph-mon-debuginfoUpgrade librgw2Upgrade ceph-mdsUpgrade rbd-mirrorUpgrade cockpit-ceph-installer | Dec 14, 2020 | Apr 23, 2020 |
| Suse | — | Upgrade librbd-develUpgrade libradospp-develUpgrade python3-ceph-commonUpgrade rados-objclass-develUpgrade ceph-mgr-rookUpgrade python-rgwUpgrade librgw-develUpgrade python-radosUpgrade ceph-baseUpgrade ceph-osdUpgrade ceph-resource-agentsUpgrade cephUpgrade python3-rgwUpgrade libcephfs2Upgrade ceph-mgr-k8seventsUpgrade ceph-prometheus-alertsUpgrade ceph-mgr-diskprediction-localUpgrade libradosstriper-develUpgrade librados2Upgrade ceph-dashboard-e2eUpgrade ceph-mgrUpgrade ceph-radosgwUpgrade libradosstriper1Upgrade ceph-mgr-diskprediction-cloudUpgrade librbd1Upgrade ceph-mgr-dashboardUpgrade python3-ceph-argparseUpgrade rbd-fuseUpgrade ceph-testUpgrade python3-radosUpgrade ceph-fuseUpgrade librgw2Upgrade ceph-mgr-sshUpgrade rbd-nbdUpgrade python3-cephfsUpgrade ceph-monUpgrade cephfs-shellUpgrade python-cephfsUpgrade rbd-mirrorUpgrade python3-rbdUpgrade librados-develUpgrade ceph-grafana-dashboardsUpgrade python-rbdUpgrade ceph-commonUpgrade libcephfs-develUpgrade ceph-mds | Apr 9, 2020 | Apr 7, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade ceph-commonUpgrade ceph | Sep 23, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub