{"action":"Upgrade ceph to 14.2.21-1 or later.","affected":[{"fixed":"14.2.21-1","introduced":"0"}],"component":"ceph","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["14.2.21-1"],"id":"tcs_01M5NFS0ZQSBNJX7M3TJZ77SHA","modified_at":"2026-10-23T18:03:15.324509989Z","published_at":"2021-05-27T00:15:08.577Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-3509","https://security-tracker.debian.org/tracker/CVE-2021-3509"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-3509#Debian:13/ceph","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-3509"}],"summary":"A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used"}