| Max CVSS | 5.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-12059 | 5.0 |
An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
|
23-10-2023 - 19:15 | 22-04-2020 - 13:15 | |
| CVE-2020-1760 | 4.3 |
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
|
23-10-2023 - 19:15 | 23-04-2020 - 15:15 | |
| CVE-2020-10753 | 4.3 |
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file genera
|
23-10-2023 - 19:15 | 26-06-2020 - 15:15 | |
| CVE-2020-1760 | 4.3 |
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
|
24-09-2020 - 17:15 | 23-04-2020 - 15:15 | |
| CVE-2020-12059 | 5.0 |
An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
|
24-09-2020 - 17:15 | 22-04-2020 - 13:15 | |
| CVE-2020-10753 | 4.3 |
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file genera
|
24-09-2020 - 17:15 | 26-06-2020 - 15:15 |