CVEvulnerability

CVE-2020-1760

6.1 MEDIUM Published 2020-04-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

Affected configurations

• linuxfoundation ceph (< 14.2.21) • redhat ceph storage 3.0 • redhat ceph storage 4.0 • redhat openshift container platform 4.2 • fedoraproject fedora 31 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • debian debian linux 9.0

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References