tocsin

Debian/ceph: high 7.5

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw t

Action: Upgrade ceph to 10.2.5-2 or later.

Affected

introducedfixedlast affected
010.2.5-2-

Fixed versions

10.2.5-2

Sources

published · modified · JSON