https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:47:22 +0000 https://vulnerability.circl.lu/vuln/cve-2020-1760 <p><strong>Affected:</strong> [UNKNOWN] ceph</p> <p>A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.</p> <p><strong>Affected:</strong> [UNKNOWN] ceph</p> <p>A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.</p> https://vulnerability.circl.lu/vuln/cve-2020-1760 https://vulnerability.circl.lu/vuln/usn-4528-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ceph, Ubuntu:18.04:LTS: ceph</p> <p>Adam Mohammed discovered that Ceph incorrectly handled certain CORS ExposeHeader tags. A remote attacker could possibly use this issue to preform an HTTP header injection attack. (CVE-2020-10753)</p> <p>Lei Cao discovered that Ceph incorrectly handled certain POST requests with invalid tagging XML. A remote attacker could possibly use this issue to cause Ceph to crash, leading to a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-12059)</p> <p>Robin H. Johnson discovered that Ceph incorrectly handled certain S3 requests. A remote attacker could possibly use this issue to perform a XSS attack. (CVE-2020-1760)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ceph, Ubuntu:18.04:LTS: ceph</p> <p>Adam Mohammed discovered that Ceph incorrectly handled certain CORS ExposeHeader tags. A remote attacker could possibly use this issue to preform an HTTP header injection attack. (CVE-2020-10753)</p> <p>Lei Cao discovered that Ceph incorrectly handled certain POST requests with invalid tagging XML. A remote attacker could possibly use this issue to cause Ceph to crash, leading to a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-12059)</p> <p>Robin H. Johnson discovered that Ceph incorrectly handled certain S3 requests. A remote attacker could possibly use this issue to perform a XSS attack. (CVE-2020-1760)</p> https://vulnerability.circl.lu/vuln/usn-4528-1