A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Apr 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 23, 2020 |
| Centos_linux | — | Upgrade nfs-ganesha-rados-grace-debuginfoUpgrade librados-develUpgrade nfs-ganesha-debuginfoUpgrade ceph-medicUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-fuse-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade libradosstriper1-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-commonUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade ceph-mgr-debuginfoUpgrade libcephfs-develUpgrade rbd-mirror-debuginfoUpgrade ceph-mds-debuginfoUpgrade nfs-ganesha-selinuxUpgrade cockpit-ceph-installerUpgrade ceph-radosgwUpgrade ceph-fuse-debuginfoUpgrade ceph-baseUpgrade librbd-develUpgrade python-cephfsUpgrade rbd-nbd-debuginfoUpgrade rbd-mirrorUpgrade python3-rbd-debuginfoUpgrade python-ceph-argparseUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-vfsUpgrade libradospp-develUpgrade ceph-fuseUpgrade librados-devel-debuginfoUpgrade ceph-debuginfoUpgrade libradosstriper1Upgrade librgw-develUpgrade python3-rados-debuginfoUpgrade python-rgwUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-cephUpgrade librgw2-debuginfoUpgrade librgw2Upgrade ceph-debugsourceUpgrade python3-rgwUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-rgwUpgrade ceph-mon-debuginfoUpgrade ceph-selinuxUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganeshaUpgrade libcephfs2Upgrade ceph-test-debuginfoUpgrade ceph-osd-debuginfoUpgrade python3-rbdUpgrade python3-rgw-debuginfoUpgrade python3-cephfsUpgrade ceph-common-debuginfoUpgrade ceph-mdsUpgrade python3-radosUpgrade ceph-ansibleUpgrade python3-ceph-argparseUpgrade nfs-ganesha-proxy | Dec 14, 2020 | Apr 23, 2020 |
| Debian | — | Upgrade ceph | Apr 13, 2020 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade librbd1Upgrade ceph-commonUpgrade python-rbdUpgrade librados2Upgrade python-rados | Feb 24, 2022 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade librados2Upgrade ceph-commonUpgrade python-rbdUpgrade librbd1Upgrade python-rados | Sep 7, 2021 | Apr 23, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-rbdUpgrade librbd1Upgrade librados2Upgrade python-rados | Apr 26, 2022 | Apr 23, 2020 |
| Redhat_linux | — | Upgrade ceph-base-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-test-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-vfsUpgrade librgw2-debuginfoUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-baseUpgrade libradospp-develUpgrade ceph-mdsUpgrade libradosstriper1Upgrade nfs-ganesha-debuginfoUpgrade ceph-radosgwUpgrade python3-rgw-debuginfoUpgrade python-ceph-argparseUpgrade ceph-ansibleUpgrade rbd-nbdUpgrade librgw2Upgrade python3-rados-debuginfoUpgrade libradosstriper1-debuginfoUpgrade nfs-ganeshaUpgrade python-rgwUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-debugsourceUpgrade python3-rbdUpgrade python-cephfsUpgrade ceph-selinuxUpgrade librbd-develUpgrade cockpit-ceph-installerUpgrade ceph-fuseUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade nfs-ganesha-selinuxUpgrade python3-radosUpgrade ceph-commonUpgrade python3-rgwUpgrade rbd-nbd-debuginfoUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade libcephfs2Upgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-medicUpgrade libcephfs2-debuginfoUpgrade libcephfs-develUpgrade python3-cephfs-debuginfoUpgrade librados-develUpgrade python3-ceph-argparseUpgrade librgw-develUpgrade nfs-ganesha-rgwUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-proxyUpgrade ceph-debugsourceUpgrade rbd-mirror-debuginfoUpgrade librados-devel-debuginfo | Dec 14, 2020 | Apr 23, 2020 |
| Suse | — | Upgrade python3-rbdUpgrade rbd-nbdUpgrade rbd-mirrorUpgrade librados-develUpgrade ceph-testUpgrade rbd-fuseUpgrade ceph-mdsUpgrade ceph-monUpgrade python3-ceph-argparseUpgrade python3-cephfsUpgrade ceph-fuseUpgrade ceph-mgr-diskprediction-cloudUpgrade python-cephfsUpgrade ceph-mgr-sshUpgrade librgw2Upgrade python3-radosUpgrade librbd1Upgrade libcephfs-develUpgrade ceph-mgr-dashboardUpgrade ceph-commonUpgrade ceph-grafana-dashboardsUpgrade python-rbdUpgrade cephfs-shellUpgrade cephUpgrade librados2Upgrade ceph-mgr-diskprediction-localUpgrade librgw-develUpgrade ceph-resource-agentsUpgrade librbd-develUpgrade python-rgwUpgrade ceph-prometheus-alertsUpgrade libradosstriper-develUpgrade ceph-mgrUpgrade ceph-mgr-rookUpgrade rados-objclass-develUpgrade ceph-osdUpgrade python-radosUpgrade ceph-radosgwUpgrade libradospp-develUpgrade ceph-dashboard-e2eUpgrade ceph-mgr-k8seventsUpgrade python3-rgwUpgrade python3-ceph-commonUpgrade ceph-baseUpgrade libcephfs2Upgrade libradosstriper1 | Apr 9, 2020 | Apr 7, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade cephUpgrade ceph-common | Sep 23, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub