CVE-2020-1760

Опубликовано: 23 апр. 2020

Источник: nvd

CVSS3: 5.8

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1760
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/
https://security.gentoo.org/glsa/202105-39
Third Party Advisory
https://usn.ubuntu.com/4528-1/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/04/07/1
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1760
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/
https://security.gentoo.org/glsa/202105-39
Third Party Advisory
https://usn.ubuntu.com/4528-1/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/04/07/1
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linuxfoundation:ceph:*:*:*:*:*:*:*:*

Версия до 14.2.21 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:ceph_storage:4.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Конфигурация 5

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.01525

Низкий

5.8 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2020-1760

CVSS3: 5.8

ubuntu

больше 6 лет назад

CVE-2020-1760

CVSS3: 5.8

redhat

больше 6 лет назад

CVE-2020-1760

CVSS3: 5.8

debian

больше 6 лет назад

A flaw was found in the Ceph Object Gateway, where it supports request ...

SUSE-SU-2020:0962-1

suse-cvrf

больше 6 лет назад

Security update for ceph

GHSA-gj74-48rr-85f7

CVSS3: 6.1

github

больше 4 лет назад

EPSS

Процентиль: 73%

0.01525

Низкий

5.8 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79