Lucene search
PRIOn knowledge basePRION:CVE-2020-1760HistoryApr 23, 2020 - 3:15 p.m.
Input validation
2020-04-2315:15:00
PRIOn knowledge base
www.prio-n.com
7
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 16.04 | |
| debian_linux | eq | 9.0 | |
| fedora | eq | 31 | |
| ceph | lt | 14.2.21 | |
| ceph_storage | eq | 3.0 | |
| ceph_storage | eq | 4.0 | |
| openshift_container_platform | eq | 4.2 |
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1760
lists.debian.org/debian-lts-announce/2021/08/msg00013.html
lists.debian.org/debian-lts-announce/2023/10/msg00034.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/
security.gentoo.org/glsa/202105-39
usn.ubuntu.com/4528-1/
www.openwall.com/lists/oss-security/2020/04/07/1
Related
osv
osv
CVE-2020-1760
2020-04-23 15:15:14
ceph - security update
2020-04-09 00:00:00
ceph vulnerabilities
2020-09-22 11:17:52
cve
cve
CVE-2020-1760
2020-04-23 15:15:14
nessus
nessus
EulerOS Virtualization 3.0.2.6 : ceph-common (EulerOS-SA-2021-2897)
2022-01-06 00:00:00
EulerOS 2.0 SP3 : ceph-common (EulerOS-SA-2022-1157)
2022-02-23 00:00:00
SUSE SLES12 Security Update : ceph (SUSE-SU-2020:0962-1)
2020-04-10 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0962-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for ceph (EulerOS-SA-2022-1558)
2022-04-25 00:00:00
Huawei EulerOS: Security Advisory for ceph-common (EulerOS-SA-2021-2897)
2021-12-31 00:00:00
redhatcve
redhatcve
CVE-2020-1760
2020-04-07 07:05:37
debian
debian
[SECURITY] [DLA 2171-1] ceph security update
2020-04-09 11:29:20
[SECURITY] [DLA 2735-1] ceph security update
2021-08-10 22:05:10
[SECURITY] [DLA 3629-1] ceph security update
2023-10-23 16:59:44
nvd
nvd
CVE-2020-1760
2020-04-23 15:15:14
veracode
veracode
Cross-Site Scripting (XSS)
2020-07-21 04:11:58
ubuntucve
ubuntucve
CVE-2020-1760
2020-04-23 00:00:00
alpinelinux
alpinelinux
CVE-2020-1760
2020-04-23 15:15:14
cvelist
cvelist
CVE-2020-1760
2020-04-23 00:00:00
debiancve
debiancve
CVE-2020-1760
2020-04-23 15:15:14
freebsd
freebsd
ceph14 -- multiple security issues
2020-04-07 00:00:00
redhat
redhat
suse
suse
Security update for ceph (important)
2020-04-10 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: ceph-14.2.9-1.fc31
2020-05-07 04:21:05
ubuntu
ubuntu
Ceph vulnerabilities
2020-09-22 00:00:00
archlinux
archlinux
[ASA-202011-22] ceph: multiple issues
2020-11-26 00:00:00
gentoo
gentoo
Ceph: Multiple vulnerabilities
2021-05-26 00:00:00