A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Apr 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 23, 2020 |
| Centos_linux | — | Upgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade python-ceph-argparseUpgrade librados-devel-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-radosgwUpgrade cockpit-ceph-installerUpgrade libradosstriper1-debuginfoUpgrade rbd-nbd-debuginfoUpgrade librbd-develUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-nbdUpgrade python-cephfsUpgrade ceph-debuginfoUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade rbd-fuse-debuginfoUpgrade librados-develUpgrade ceph-commonUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade rbd-mirrorUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-selinuxUpgrade libcephfs-develUpgrade ceph-baseUpgrade libcephfs2-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade ceph-grafana-dashboardsUpgrade ceph-medicUpgrade libradospp-develUpgrade ceph-fuseUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-common-debuginfoUpgrade libcephfs2Upgrade ceph-test-debuginfoUpgrade ceph-osd-debuginfoUpgrade nfs-ganeshaUpgrade python3-radosUpgrade nfs-ganesha-rgwUpgrade ceph-mon-debuginfoUpgrade ceph-selinuxUpgrade python3-rbdUpgrade nfs-ganesha-debugsourceUpgrade python3-cephfsUpgrade librgw2-debuginfoUpgrade python3-rgwUpgrade ceph-ansibleUpgrade nfs-ganesha-proxyUpgrade librgw-develUpgrade nfs-ganesha-proxy-debuginfoUpgrade librgw2Upgrade python3-rados-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-cephUpgrade ceph-debugsourceUpgrade python3-rgw-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libradosstriper1Upgrade python-rgwUpgrade python3-cephfs-debuginfoUpgrade ceph-mds | Dec 14, 2020 | Apr 23, 2020 |
| Debian | — | Upgrade ceph | Apr 13, 2020 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-rbdUpgrade ceph-commonUpgrade librbd1Upgrade python-radosUpgrade librados2 | Feb 24, 2022 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ceph-commonUpgrade librbd1Upgrade python-rbdUpgrade librados2Upgrade python-rados | Sep 7, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librados2Upgrade python-radosUpgrade python-rbdUpgrade librbd1 | Apr 26, 2022 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade nfs-ganeshaUpgrade librgw2Upgrade python3-rados-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-fuse-debuginfoUpgrade python-rgwUpgrade libradosstriper1Upgrade ceph-debuginfoUpgrade python-ceph-argparseUpgrade ceph-mds-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-rbdUpgrade ceph-common-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-mgr-debuginfoUpgrade rbd-mirrorUpgrade ceph-mdsUpgrade ceph-fuseUpgrade ceph-base-debuginfoUpgrade libradospp-develUpgrade ceph-ansibleUpgrade nfs-ganesha-cephUpgrade ceph-radosgwUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade librbd-develUpgrade ceph-baseUpgrade cockpit-ceph-installerUpgrade python-cephfsUpgrade nfs-ganesha-rados-urlsUpgrade ceph-selinuxUpgrade python3-rgw-debuginfoUpgrade ceph-osd-debuginfoUpgrade python3-rbd-debuginfoUpgrade python3-cephfsUpgrade libcephfs-develUpgrade librgw-develUpgrade ceph-debugsourceUpgrade ceph-medicUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-rgw-debuginfoUpgrade python3-rgwUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-selinuxUpgrade python3-ceph-argparseUpgrade librados-develUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-rgwUpgrade ceph-commonUpgrade libcephfs2Upgrade nfs-ganesha-vfs-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-grafana-dashboardsUpgrade rbd-fuse-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python3-rados | Dec 14, 2020 | Apr 23, 2020 |
| Suse | — | Upgrade ceph-mgr-sshUpgrade python-rbdUpgrade ceph-grafana-dashboardsUpgrade cephfs-shellUpgrade python-cephfsUpgrade python3-ceph-argparseUpgrade ceph-mgr-dashboardUpgrade librbd1Upgrade ceph-fuseUpgrade python3-radosUpgrade librgw2Upgrade ceph-mgr-diskprediction-cloudUpgrade ceph-monUpgrade ceph-testUpgrade rbd-nbdUpgrade rbd-mirrorUpgrade ceph-mdsUpgrade librados-develUpgrade rbd-fuseUpgrade python3-rbdUpgrade python3-cephfsUpgrade libcephfs-develUpgrade ceph-commonUpgrade ceph-radosgwUpgrade python-radosUpgrade libradosstriper-develUpgrade ceph-mgr-rookUpgrade ceph-prometheus-alertsUpgrade ceph-mgrUpgrade ceph-dashboard-e2eUpgrade ceph-osdUpgrade cephUpgrade python3-ceph-commonUpgrade ceph-baseUpgrade rados-objclass-develUpgrade libcephfs2Upgrade librados2Upgrade ceph-mgr-diskprediction-localUpgrade libradosstriper1Upgrade librbd-develUpgrade ceph-mgr-k8seventsUpgrade librgw-develUpgrade libradospp-develUpgrade python-rgwUpgrade python3-rgwUpgrade ceph-resource-agents | Apr 9, 2020 | Apr 7, 2020 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph-baseUpgrade ceph | Sep 23, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub