Debian/ceph: medium 6.5
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the Expo
Action: Upgrade ceph to 14.2.15-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.2.15-1 | - |
Fixed versions
| 14.2.15-1 |
Sources
- osv: DEBIAN-CVE-2020-10753#Debian:13/ceph
- https://security-tracker.debian.org/tracker/CVE-2020-10753
published · modified · JSON