Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2020-10753
HistoryJun 26, 2020 - 3:15 p.m.

CVE-2020-10753

2020-06-2615:15:11
Google
osv.dev
9

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.0%

JSON

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. Ceph versions 3.x and 4.x are vulnerable to this issue.

CPENameOperatorVersion
cepheq0.7.2
cepheq14.2.8
cepheq0.44
cepheq0.10
cepheq0.42
cepheq0.29.1
cepheq0.43
cepheq9.1.0
cepheq0.40
cepheq0.91
Rows per page:
1-10 of 1851

Related

openvas 13
nessus 20
veracode 2
cve 2
cvelist 2
suse 1
alpinelinux 2
nvd 2
freebsd 1
debiancve 2
redhatcve 1
prion 2
redhat 3
fedora 1
ubuntucve 2
osv 5
ubuntu 2
debian 2
archlinux 2
gentoo 1
openvas
openvas
openSUSE: Security Advisory for ceph (openSUSE-SU-2020:0898-1)
2020-06-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1748-1)
2021-04-19 00:00:00
Fedora: Security Advisory for ceph (FEDORA-2020-c9bff9688e)
2020-07-08 00:00:00
nessus
nessus
RHEL 7 : Red Hat Ceph Storage 3.3 (RHSA-2020:3504)
2020-08-18 00:00:00
FreeBSD : ceph14 -- HTTP header injection via CORS ExposeHeader tag (f20eb9a4-dfea-11ea-a9b8-9c5c8e84d621)
2020-08-18 00:00:00
Fedora 32 : 2:ceph (2020-c9bff9688e)
2020-07-06 00:00:00
veracode
veracode
HTTP Header Injection
2020-07-21 04:06:57
Cross-Site Scripting (XSS)
2021-05-23 06:05:56
cve
cve
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
cvelist
cvelist
CVE-2020-10753
2020-06-26 00:00:00
CVE-2021-3524
2021-05-17 00:00:00
suse
suse
Security update for ceph (important)
2020-06-29 00:00:00
alpinelinux
alpinelinux
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
nvd
nvd
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
freebsd
freebsd
ceph14 -- HTTP header injection via CORS ExposeHeader tag
2020-05-27 00:00:00
debiancve
debiancve
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
redhatcve
redhatcve
CVE-2020-10753
2020-06-25 19:22:59
prion
prion
Design/Logic Flaw
2020-06-26 15:15:00
Design/Logic Flaw
2021-05-17 17:15:00
redhat
redhat
(RHSA-2020:3505) Moderate: Red Hat Ceph Storage 3.3 Security update
2020-08-18 17:48:48
(RHSA-2020:3504) Moderate: Red Hat Ceph Storage 3.3 security and bug fix update
2020-08-18 17:48:36
(RHSA-2020:3003) Moderate: Red Hat Ceph Storage 4.1 security and bug fix update
2020-07-20 13:52:21
fedora
fedora
[SECURITY] Fedora 32 Update: ceph-14.2.10-1.fc32
2020-07-06 01:02:55
ubuntucve
ubuntucve
CVE-2020-10753
2020-06-26 00:00:00
CVE-2021-3524
2021-05-17 00:00:00
osv
osv
CVE-2021-3524
2021-05-17 17:15:08
ceph vulnerabilities
2020-09-22 11:17:52
ceph vulnerabilities
2021-01-28 13:40:18
ubuntu
ubuntu
Ceph vulnerabilities
2020-09-22 00:00:00
Ceph vulnerabilities
2021-01-28 00:00:00
debian
debian
[SECURITY] [DLA 2735-1] ceph security update
2021-08-10 22:05:10
[SECURITY] [DLA 3629-1] ceph security update
2023-10-23 16:59:44
archlinux
archlinux
[ASA-202011-22] ceph: multiple issues
2020-11-26 00:00:00
[ASA-202105-3] ceph: multiple issues
2021-05-19 00:00:00
gentoo
gentoo
Ceph: Multiple vulnerabilities
2021-05-26 00:00:00

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.0%

JSON
Related for OSV:CVE-2020-10753
openvas13nessus20veracode2cve2cvelist2suse1alpinelinux2nvd2freebsd1debiancve2redhatcve1prion2redhat3fedora1ubuntucve2osv5ubuntu2debian2archlinux2gentoo1