A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Apr 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 23, 2020 |
| Centos_linux | — | Upgrade python-rgwUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganeshaUpgrade librgw2-debuginfoUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-test-debuginfoUpgrade librgw2Upgrade python3-rgwUpgrade ceph-debugsourceUpgrade ceph-common-debuginfoUpgrade ceph-mdsUpgrade nfs-ganesha-debugsourceUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-rgwUpgrade librgw-develUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade ceph-selinuxUpgrade nfs-ganesha-proxyUpgrade python3-rbdUpgrade python3-rgw-debuginfoUpgrade libradosstriper1Upgrade ceph-mon-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade python3-radosUpgrade libcephfs2Upgrade ceph-osd-debuginfoUpgrade ceph-ansibleUpgrade nfs-ganesha-ceph-debuginfoUpgrade rbd-nbd-debuginfoUpgrade librbd-develUpgrade python-ceph-argparseUpgrade ceph-radosgwUpgrade cockpit-ceph-installerUpgrade ceph-mds-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-fuseUpgrade libradospp-develUpgrade ceph-medicUpgrade ceph-grafana-dashboardsUpgrade ceph-debuginfoUpgrade libradosstriper1-debuginfoUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-vfsUpgrade python3-rbd-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-commonUpgrade ceph-baseUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade rbd-mirror-debuginfoUpgrade rbd-mirrorUpgrade python-cephfsUpgrade ceph-mgr-debuginfoUpgrade libcephfs-develUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rados-urlsUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-nbdUpgrade rbd-fuse-debuginfoUpgrade librados-develUpgrade nfs-ganesha-rados-grace-debuginfo | Dec 14, 2020 | Apr 23, 2020 |
| Debian | — | Upgrade ceph | Apr 13, 2020 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade librados2Upgrade python-radosUpgrade ceph-commonUpgrade librbd1Upgrade python-rbd | Feb 24, 2022 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-radosUpgrade ceph-commonUpgrade python-rbdUpgrade librados2Upgrade librbd1 | Sep 7, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librados2Upgrade python-rbdUpgrade librbd1 | Apr 26, 2022 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade ceph-grafana-dashboardsUpgrade python3-radosUpgrade nfs-ganesha-ceph-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-commonUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-selinuxUpgrade rbd-nbd-debuginfoUpgrade librados-develUpgrade python3-cephfs-debuginfoUpgrade libcephfs-develUpgrade ceph-medicUpgrade nfs-ganesha-proxyUpgrade rbd-mirror-debuginfoUpgrade librgw-develUpgrade python3-rgwUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-debugsourceUpgrade libcephfs2-debuginfoUpgrade libcephfs2Upgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-mon-debuginfoUpgrade python-rgwUpgrade ceph-debuginfoUpgrade python3-rbd-debuginfoUpgrade rbd-nbdUpgrade librgw2Upgrade ceph-selinuxUpgrade ceph-mdsUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade python3-rbdUpgrade nfs-ganesha-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-osd-debuginfoUpgrade python3-rados-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade libradosstriper1Upgrade librbd-develUpgrade ceph-fuse-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-rados-graceUpgrade python-cephfsUpgrade ceph-mds-debuginfoUpgrade cockpit-ceph-installerUpgrade ceph-mgr-debuginfoUpgrade ceph-radosgwUpgrade librgw2-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-rados-urlsUpgrade python3-rgw-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-test-debuginfoUpgrade rbd-mirrorUpgrade ceph-fuseUpgrade ceph-base-debuginfoUpgrade python-ceph-argparseUpgrade nfs-ganesha-vfsUpgrade libradospp-develUpgrade ceph-ansibleUpgrade nfs-ganesha-ceph | Dec 14, 2020 | Apr 23, 2020 |
| Suse | — | Upgrade cephfs-shellUpgrade python-cephfsUpgrade ceph-grafana-dashboardsUpgrade ceph-fuseUpgrade ceph-mdsUpgrade python-rbdUpgrade libcephfs-develUpgrade librbd1Upgrade ceph-commonUpgrade librados-develUpgrade ceph-monUpgrade python3-cephfsUpgrade rbd-mirrorUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-testUpgrade rbd-fuseUpgrade python3-ceph-argparseUpgrade python3-radosUpgrade ceph-mgr-sshUpgrade rbd-nbdUpgrade python3-rbdUpgrade librgw2Upgrade ceph-mgr-dashboardUpgrade librbd-develUpgrade ceph-osdUpgrade libcephfs2Upgrade ceph-radosgwUpgrade ceph-baseUpgrade cephUpgrade python3-ceph-commonUpgrade ceph-mgr-diskprediction-localUpgrade libradosstriper-develUpgrade python3-rgwUpgrade libradospp-develUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-rookUpgrade python-radosUpgrade libradosstriper1Upgrade ceph-resource-agentsUpgrade librados2Upgrade ceph-dashboard-e2eUpgrade ceph-mgrUpgrade ceph-prometheus-alertsUpgrade rados-objclass-develUpgrade librgw-develUpgrade python-rgw | Apr 9, 2020 | Apr 7, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade cephUpgrade ceph-common | Sep 23, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub