https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T22:47:22.117096+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-1760 CVE-2020-1760 2026-09-29T22:47:22.119127+00:00

Affected: [UNKNOWN] ceph

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

 https://vulnerability.circl.lu/vuln/usn-4528-1 USN-4528-1 — ceph vulnerabilities 2026-09-29T22:47:22.119209+00:00

Affected: Ubuntu:16.04:LTS: ceph, Ubuntu:18.04:LTS: ceph

Adam Mohammed discovered that Ceph incorrectly handled certain CORS ExposeHeader tags. A remote attacker could possibly use this issue to preform an HTTP header injection attack. (CVE-2020-10753)

Lei Cao discovered that Ceph incorrectly handled certain POST requests with invalid tagging XML. A remote attacker could possibly use this issue to cause Ceph to crash, leading to a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-12059)

Robin H. Johnson discovered that Ceph incorrectly handled certain S3 requests. A remote attacker could possibly use this issue to perform a XSS attack. (CVE-2020-1760)