Home

CVE-2020-1760

Description

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.353

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) ceph-common-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) ceph-common-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) ceph-common-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) ceph-common-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) ceph-debugsource-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) ceph-debugsource-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) libcephfs2-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) libcephfs2-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) libcephfs2-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) libcephfs2-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) librados2-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) librados2-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) librados2-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) librados2-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) libradosstriper1-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) libradosstriper1-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) libradosstriper1-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) libradosstriper1-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) librbd1-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) librbd1-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) librbd1-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) librbd1-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) librgw2-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) librgw2-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP4 ) librgw2-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64.rpmLinux
SUSE-SU-2020:0962-1(SUSE Linux Enterprise Server 12-SP5 ) librgw2-debuginfo-12.2.12+git.1585658687.363df3a813-2.42.4.x86_64_SP5.rpmLinux
distributed storage and file system (USN-4528-1) ceph_10.2.11-0ubuntu0.16.04.3_i386.debLinux
distributed storage and file system (USN-4528-1) ceph_10.2.11-0ubuntu0.16.04.3_amd64.debLinux
distributed storage and file system (USN-4528-1) ceph_12.2.13-0ubuntu0.18.04.4_i386.debLinux
distributed storage and file system (USN-4528-1) ceph_12.2.13-0ubuntu0.18.04.4_amd64.debLinux
distributed storage and file system (USN-4528-1) ceph-base_12.2.13-0ubuntu0.18.04.4_i386.debLinux
distributed storage and file system (USN-4528-1) ceph-base_12.2.13-0ubuntu0.18.04.4_amd64.debLinux
distributed storage and file system (USN-4528-1) ceph-common_10.2.11-0ubuntu0.16.04.3_i386.debLinux
distributed storage and file system (USN-4528-1) ceph-common_10.2.11-0ubuntu0.16.04.3_amd64.debLinux
distributed storage and file system (USN-4528-1) ceph-common_12.2.13-0ubuntu0.18.04.4_i386.debLinux
distributed storage and file system (USN-4528-1) ceph-common_12.2.13-0ubuntu0.18.04.4_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234