A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Apr 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 23, 2020 |
| Centos_linux | — | Upgrade libcephfs-develUpgrade libradospp-develUpgrade rbd-nbdUpgrade ceph-fuseUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-commonUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-base-debuginfoUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-selinuxUpgrade ceph-baseUpgrade python3-rbd-debuginfoUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-grafana-dashboardsUpgrade librados-develUpgrade libradosstriper1-debuginfoUpgrade ceph-medicUpgrade nfs-ganesha-vfsUpgrade rbd-mirror-debuginfoUpgrade ceph-mgr-debuginfoUpgrade python-cephfsUpgrade rbd-mirrorUpgrade librbd-develUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python-ceph-argparseUpgrade ceph-mds-debuginfoUpgrade cockpit-ceph-installerUpgrade ceph-radosgwUpgrade nfs-ganesha-debuginfoUpgrade librgw-develUpgrade ceph-debugsourceUpgrade nfs-ganeshaUpgrade python3-cephfs-debuginfoUpgrade ceph-mdsUpgrade ceph-common-debuginfoUpgrade librgw2Upgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-cephUpgrade librgw2-debuginfoUpgrade python3-rgwUpgrade ceph-radosgw-debuginfoUpgrade ceph-osd-debuginfoUpgrade python3-rbdUpgrade nfs-ganesha-proxyUpgrade libcephfs2Upgrade ceph-test-debuginfoUpgrade python3-rgw-debuginfoUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade ceph-ansibleUpgrade python3-rados-debuginfoUpgrade libradosstriper1Upgrade ceph-mon-debuginfoUpgrade python-rgwUpgrade nfs-ganesha-rgwUpgrade ceph-selinuxUpgrade python3-radosUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-rados-grace | Dec 14, 2020 | Apr 23, 2020 |
| Debian | — | Upgrade ceph | Apr 13, 2020 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-rbdUpgrade ceph-commonUpgrade librbd1Upgrade python-radosUpgrade librados2 | Feb 24, 2022 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-radosUpgrade librbd1Upgrade ceph-commonUpgrade librados2Upgrade python-rbd | Sep 7, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-rbdUpgrade librbd1Upgrade librados2Upgrade python-rados | Apr 26, 2022 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade ceph-mdsUpgrade rbd-mirrorUpgrade ceph-fuseUpgrade librgw2Upgrade python-ceph-argparseUpgrade ceph-mds-debuginfoUpgrade python-rgwUpgrade nfs-ganesha-rados-graceUpgrade python3-rbd-debuginfoUpgrade ceph-baseUpgrade ceph-base-debuginfoUpgrade python-cephfsUpgrade ceph-common-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade libradosstriper1Upgrade rbd-nbdUpgrade ceph-mgr-debuginfoUpgrade ceph-radosgwUpgrade cockpit-ceph-installerUpgrade librbd-develUpgrade ceph-fuse-debuginfoUpgrade ceph-ansibleUpgrade ceph-selinuxUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-vfsUpgrade ceph-osd-debuginfoUpgrade libradosstriper1-debuginfoUpgrade python3-rados-debuginfoUpgrade ceph-test-debuginfoUpgrade libradospp-develUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade librgw2-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-mon-debuginfoUpgrade python3-rbdUpgrade python3-rgw-debuginfoUpgrade python3-cephfsUpgrade ceph-debuginfoUpgrade nfs-ganesha-cephUpgrade nfs-ganeshaUpgrade libcephfs2Upgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-proxyUpgrade librados-devel-debuginfoUpgrade python3-rgwUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-proxy-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-debugsourceUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-commonUpgrade python3-radosUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-rgwUpgrade python3-cephfs-debuginfoUpgrade libcephfs-develUpgrade ceph-medicUpgrade rbd-nbd-debuginfoUpgrade librados-develUpgrade libcephfs2-debuginfo | Dec 14, 2020 | Apr 23, 2020 |
| Suse | — | Upgrade cephfs-shellUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-dashboardUpgrade python-cephfsUpgrade python-rbdUpgrade librados-develUpgrade librgw2Upgrade rbd-nbdUpgrade librbd1Upgrade rbd-mirrorUpgrade python3-radosUpgrade ceph-mdsUpgrade python3-cephfsUpgrade ceph-fuseUpgrade ceph-monUpgrade ceph-mgr-sshUpgrade libcephfs-develUpgrade python3-rbdUpgrade ceph-testUpgrade rbd-fuseUpgrade python3-ceph-argparseUpgrade ceph-commonUpgrade librbd-develUpgrade librgw-develUpgrade ceph-resource-agentsUpgrade ceph-dashboard-e2eUpgrade python-rgwUpgrade python-radosUpgrade python3-rgwUpgrade libcephfs2Upgrade libradospp-develUpgrade ceph-mgr-k8seventsUpgrade rados-objclass-develUpgrade ceph-mgr-rookUpgrade ceph-mgr-diskprediction-localUpgrade libradosstriper1Upgrade librados2Upgrade ceph-osdUpgrade python3-ceph-commonUpgrade cephUpgrade ceph-baseUpgrade ceph-mgrUpgrade ceph-prometheus-alertsUpgrade libradosstriper-develUpgrade ceph-radosgw | Apr 9, 2020 | Apr 7, 2020 |
| Ubuntu | — | Upgrade cephUpgrade ceph-baseUpgrade ceph-common | Sep 23, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub