CVE-2020-1760

Опубликовано: 23 апр. 2020

Источник: nvd

CVSS3: 5.8

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1760
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/
https://security.gentoo.org/glsa/202105-39
Third Party Advisory
https://usn.ubuntu.com/4528-1/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/04/07/1
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1760
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/
https://security.gentoo.org/glsa/202105-39
Third Party Advisory
https://usn.ubuntu.com/4528-1/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/04/07/1
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linuxfoundation:ceph:*:*:*:*:*:*:*:*

Версия до 14.2.21 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:ceph_storage:4.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Конфигурация 5

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00353

Низкий

5.8 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2020-1760

CVSS3: 5.8

ubuntu

почти 6 лет назад

CVE-2020-1760

CVSS3: 5.8

redhat

почти 6 лет назад

CVE-2020-1760

CVSS3: 5.8

debian

почти 6 лет назад

A flaw was found in the Ceph Object Gateway, where it supports request ...

SUSE-SU-2020:0962-1

suse-cvrf

почти 6 лет назад

Security update for ceph

GHSA-gj74-48rr-85f7

CVSS3: 6.1

github

больше 3 лет назад

EPSS

Процентиль: 57%

0.00353

Низкий

5.8 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79