CVE-2020-1760

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2020-1760

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1760.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-1760

Related

Published

2020-04-23T15:15:14Z

Modified

2024-09-18T01:00:20Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

References

Affected packages

Debian:11 / ceph

Package

Name: ceph
Purl: pkg:deb/debian/ceph?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

14.2.9-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / ceph

Package

Name: ceph
Purl: pkg:deb/debian/ceph?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

14.2.9-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / ceph

Package

Name: ceph
Purl: pkg:deb/debian/ceph?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

14.2.9-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}