Поиск уязвимостей
Количество 12
Количество 12
GHSA-3rmw-wm6w-rmcr
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
CVE-2021-3524
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
CVE-2021-3524
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
CVE-2021-3524
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
CVE-2021-3524
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gate ...
BDU:2021-03709
Уязвимость системы хранения данных Ceph, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю оказать воздействие на целостность данных
openSUSE-SU-2021:1834-1
Security update for ceph
openSUSE-SU-2021:0833-1
Security update for ceph
SUSE-SU-2021:1835-1
Security update for ceph
SUSE-SU-2021:1834-1
Security update for ceph
ALT-PU-2021-1819
ALT-PU-2021-1819: package `ceph` update to version 15.2.12-alt1
ALT-PU-2020-2845
ALT-PU-2020-2845: package `ceph` update to version 15.2.5-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-3rmw-wm6w-rmcr A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
 | CVE-2021-3524 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created. | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-3524 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created. | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-3524 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created. | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
| CVE-2021-3524 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gate ... | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | BDU:2021-03709 Уязвимость системы хранения данных Ceph, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:1834-1 Security update for ceph | больше 5 лет назад | ||
| openSUSE-SU-2021:0833-1 Security update for ceph | больше 5 лет назад | ||
| SUSE-SU-2021:1835-1 Security update for ceph | больше 5 лет назад | ||
| SUSE-SU-2021:1834-1 Security update for ceph | больше 5 лет назад | ||
| ALT-PU-2021-1819 ALT-PU-2021-1819: package `ceph` update to version 15.2.12-alt1 | CVSS3: 6.5 | больше 5 лет назад | |
| ALT-PU-2020-2845 ALT-PU-2020-2845: package `ceph` update to version 15.2.5-alt1 | CVSS3: 7.2 | около 6 лет назад |
Уязвимостей на страницу