Lucene search
Redhat.comRH:CVE-2020-10753HistoryJun 25, 2020 - 7:22 p.m.
CVE-2020-10753
2020-06-2519:22:59
redhat.com
access.redhat.com
18
0.003 Low
EPSS
Percentile
69.0%
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Related
openvas
openvas
openSUSE: Security Advisory for ceph (openSUSE-SU-2020:0898-1)
2020-06-30 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1748-1)
2021-04-19 00:00:00
Fedora: Security Advisory for ceph (FEDORA-2020-c9bff9688e)
2020-07-08 00:00:00
nessus
nessus
RHEL 7 : Red Hat Ceph Storage 3.3 (RHSA-2020:3504)
2020-08-18 00:00:00
FreeBSD : ceph14 -- HTTP header injection via CORS ExposeHeader tag (f20eb9a4-dfea-11ea-a9b8-9c5c8e84d621)
2020-08-18 00:00:00
Fedora 32 : 2:ceph (2020-c9bff9688e)
2020-07-06 00:00:00
veracode
veracode
HTTP Header Injection
2020-07-21 04:06:57
Cross-Site Scripting (XSS)
2021-05-23 06:05:56
cve
cve
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
cvelist
cvelist
CVE-2020-10753
2020-06-26 00:00:00
CVE-2021-3524
2021-05-17 00:00:00
suse
suse
Security update for ceph (important)
2020-06-29 00:00:00
alpinelinux
alpinelinux
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
osv
osv
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
ceph vulnerabilities
2020-09-22 11:17:52
nvd
nvd
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
freebsd
freebsd
ceph14 -- HTTP header injection via CORS ExposeHeader tag
2020-05-27 00:00:00
debiancve
debiancve
CVE-2020-10753
2020-06-26 15:15:11
CVE-2021-3524
2021-05-17 17:15:08
prion
prion
Design/Logic Flaw
2020-06-26 15:15:00
Design/Logic Flaw
2021-05-17 17:15:00
redhat
redhat
(RHSA-2020:3505) Moderate: Red Hat Ceph Storage 3.3 Security update
2020-08-18 17:48:48
fedora
fedora
[SECURITY] Fedora 32 Update: ceph-14.2.10-1.fc32
2020-07-06 01:02:55
ubuntucve
ubuntucve
CVE-2020-10753
2020-06-26 00:00:00
CVE-2021-3524
2021-05-17 00:00:00
ubuntu
ubuntu
Ceph vulnerabilities
2020-09-22 00:00:00
Ceph vulnerabilities
2021-01-28 00:00:00
debian
debian
[SECURITY] [DLA 2735-1] ceph security update
2021-08-10 22:05:10
[SECURITY] [DLA 3629-1] ceph security update
2023-10-23 16:59:44
archlinux
archlinux
[ASA-202011-22] ceph: multiple issues
2020-11-26 00:00:00
[ASA-202105-3] ceph: multiple issues
2021-05-19 00:00:00
gentoo
gentoo
Ceph: Multiple vulnerabilities
2021-05-26 00:00:00