Lucene search
Veracode Vulnerability DatabaseVERACODE:30610HistoryMay 23, 2021 - 6:09 a.m.
Cross-Site Scripting (XSS)
2021-05-2306:09:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
0.001 Low
EPSS
Percentile
48.4%
Ceph is vulnerable to cross-site scripting. The vulnerability exists due to an improper validation of user-supplied input by the Ceph storage dashboard.
References
bugzilla.redhat.com/show_bug.cgi?id=1950116
github.com/ceph/ceph/blob/f1557e8f62d31883d3d34ae241a1a26af11d923f/src/pybind/mgr/dashboard/controllers/docs.py#L394-L409
github.com/ceph/ceph/commit/7a1ca8d372da3b6a4fc3d221a0e5f72d1d61c27b
github.com/ceph/ceph/commit/adda853e64bdba1288d46bc7d462d23d8f2f10ca
github.com/ceph/ceph/commit/af3fffab3b0f13057134d96e5d481e400d8bfd27
secdb.alpinelinux.org/edge/community.yaml
Related
osv
osv
CVE-2021-3509
2021-05-27 00:15:08
ceph vulnerabilities
2021-11-01 22:40:54
ceph vulnerabilities
2021-06-25 02:38:50
cve
cve
CVE-2021-3509
2021-05-27 00:15:08
redhatcve
redhatcve
CVE-2021-3509
2021-05-19 00:25:15
cvelist
cvelist
CVE-2021-3509
2021-05-26 23:56:39
debiancve
debiancve
CVE-2021-3509
2021-05-27 00:15:08
alpinelinux
alpinelinux
CVE-2021-3509
2021-05-27 00:15:08
prion
prion
Code injection
2021-05-27 00:15:00
nvd
nvd
CVE-2021-3509
2021-05-27 00:15:08
ubuntucve
ubuntucve
CVE-2021-3509
2021-05-27 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:1834-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2021-0223)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1835-1)
2021-06-09 00:00:00
suse
suse
Security update for ceph (important)
2021-06-04 00:00:00
Security update for ceph (important)
2021-07-11 00:00:00
nessus
nessus
openSUSE Security Update : ceph (openSUSE-2021-833)
2021-06-04 00:00:00
SUSE SLES15 Security Update : ceph (SUSE-SU-2021:1835-1)
2021-06-03 00:00:00
redhat
redhat
mageia
mageia
Updated ceph packages fix a security vulnerability
2021-05-27 16:43:31
ubuntu
ubuntu
Ceph vulnerabilities
2021-11-01 00:00:00
Ceph vulnerabilities
2021-06-25 00:00:00
archlinux
archlinux
[ASA-202105-3] ceph: multiple issues
2021-05-19 00:00:00