A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Apr 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 23, 2020 |
| Centos_linux | — | Upgrade ceph-ansibleUpgrade python3-ceph-argparseUpgrade ceph-selinuxUpgrade libradosstriper1Upgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-proxy-debuginfoUpgrade librgw-develUpgrade librgw2-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-debugsourceUpgrade python-rgwUpgrade python3-rgwUpgrade python3-rbdUpgrade libcephfs2Upgrade ceph-common-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-mdsUpgrade python3-radosUpgrade ceph-osd-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-rgw-debuginfoUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rados-graceUpgrade ceph-debugsourceUpgrade python3-rados-debuginfoUpgrade librgw2Upgrade nfs-ganeshaUpgrade nfs-ganesha-proxyUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rados-urlsUpgrade librados-develUpgrade nfs-ganesha-vfs-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-commonUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-baseUpgrade python3-rbd-debuginfoUpgrade libcephfs-develUpgrade ceph-radosgwUpgrade cockpit-ceph-installerUpgrade ceph-mds-debuginfoUpgrade ceph-fuse-debuginfoUpgrade python-ceph-argparseUpgrade rbd-nbdUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-fuseUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libradospp-develUpgrade nfs-ganesha-debuginfoUpgrade rbd-nbd-debuginfoUpgrade rbd-mirror-debuginfoUpgrade rbd-mirrorUpgrade python-cephfsUpgrade nfs-ganesha-vfsUpgrade librbd-develUpgrade ceph-mgr-debuginfoUpgrade ceph-medicUpgrade ceph-grafana-dashboardsUpgrade ceph-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade librados-devel-debuginfo | Dec 14, 2020 | Apr 23, 2020 |
| Debian | — | Upgrade ceph | Apr 13, 2020 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade librados2Upgrade python-radosUpgrade python-rbdUpgrade librbd1Upgrade ceph-common | Feb 24, 2022 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-radosUpgrade python-rbdUpgrade ceph-commonUpgrade librados2Upgrade librbd1 | Sep 7, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librados2Upgrade python-radosUpgrade python-rbdUpgrade librbd1 | Apr 26, 2022 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade ceph-commonUpgrade nfs-ganesha-vfs-debuginfoUpgrade librados-develUpgrade rbd-fuse-debuginfoUpgrade python3-ceph-argparseUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade librgw-develUpgrade python3-rgwUpgrade python3-radosUpgrade ceph-medicUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-debugsourceUpgrade libcephfs2Upgrade ceph-grafana-dashboardsUpgrade python3-cephfs-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libcephfs-develUpgrade libcephfs2-debuginfoUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-proxyUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganeshaUpgrade librgw2Upgrade python3-rados-debuginfoUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade ceph-mdsUpgrade python3-rbdUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python-ceph-argparseUpgrade cockpit-ceph-installerUpgrade python-cephfsUpgrade ceph-fuseUpgrade ceph-osd-debuginfoUpgrade python3-cephfsUpgrade ceph-mgr-debuginfoUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-selinuxUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-vfsUpgrade ceph-mds-debuginfoUpgrade rbd-mirrorUpgrade libradosstriper1Upgrade rbd-nbdUpgrade librgw2-debuginfoUpgrade python3-rgw-debuginfoUpgrade python-rgwUpgrade ceph-baseUpgrade nfs-ganesha-rados-urlsUpgrade ceph-fuse-debuginfoUpgrade ceph-radosgwUpgrade ceph-test-debuginfoUpgrade ceph-ansibleUpgrade nfs-ganesha-cephUpgrade libradospp-develUpgrade librbd-develUpgrade ceph-base-debuginfoUpgrade ceph-debuginfo | Dec 14, 2020 | Apr 23, 2020 |
| Suse | — | Upgrade libcephfs2Upgrade ceph-baseUpgrade ceph-mgr-k8seventsUpgrade ceph-prometheus-alertsUpgrade ceph-radosgwUpgrade python-rgwUpgrade ceph-mgr-diskprediction-localUpgrade python-radosUpgrade libradosstriper1Upgrade libradospp-develUpgrade python3-rgwUpgrade ceph-resource-agentsUpgrade librados2Upgrade librbd-develUpgrade ceph-dashboard-e2eUpgrade python3-ceph-commonUpgrade cephUpgrade rados-objclass-develUpgrade ceph-mgrUpgrade librgw-develUpgrade libradosstriper-develUpgrade ceph-mgr-rookUpgrade ceph-osdUpgrade libcephfs-develUpgrade python3-ceph-argparseUpgrade ceph-monUpgrade rbd-fuseUpgrade ceph-testUpgrade python-cephfsUpgrade ceph-mgr-diskprediction-cloudUpgrade cephfs-shellUpgrade librbd1Upgrade ceph-commonUpgrade ceph-mdsUpgrade python3-radosUpgrade ceph-fuseUpgrade ceph-mgr-dashboardUpgrade librgw2Upgrade rbd-mirrorUpgrade python3-rbdUpgrade python3-cephfsUpgrade librados-develUpgrade rbd-nbdUpgrade python-rbdUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-ssh | Apr 9, 2020 | Apr 7, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade ceph-commonUpgrade ceph | Sep 23, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub