TI-2020-01703 Aliases CVE-2020-1760 GHSA-gj74-48rr-85f7

Cross-site scripting in [UNKNOWN] ceph

LOW 30CWE-79Published 2020-04-23 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: Low · Low · None
Fix status: Partial Red Hat: 3 fixed, 4 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-79.

Summary

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

Why it matters now

EPSS 0.01557 75th percentileScored 2026-11-07

Fix Partial Red Hat: 1 advisoryRed Hat: 3 fixed, 4 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
[UNKNOWN]	ceph	15.2.1; 14.2.9; 13.2.9	—	No fix listed	CNA

ceph Vendor[UNKNOWN] Affected 15.2.1; 14.2.9; 13.2.9 Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPE	Versions	Role	Vendor
cpe:2.3:a:linuxfoundation:ceph::::::::	before 14.2.21	Vulnerable	backstage
cpe:2.3:a:redhat:ceph_storage:3.0:::::::*	3.0	Vulnerable	Red Hat
cpe:2.3:a:redhat:ceph_storage:4.0:::::::*	4.0	Vulnerable	Red Hat
cpe:2.3:a:redhat:openshift_container_platform:4.2:::::::*	4.2	Vulnerable	Red Hat
cpe:2.3:o:fedoraproject:fedora:31:::::::*	31	Vulnerable	Fedoraproject
cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::	16.04	Vulnerable	Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::	18.04	Vulnerable	Canonical
cpe:2.3:o:debian:debian_linux:9.0:::::::*	9.0	Vulnerable	Debian

cpe:2.3:a:linuxfoundation:ceph:*:*:*:*:*:*:*:* Versions before 14.2.21 Vulnerable ·backstage
cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
cpe:2.3:a:redhat:ceph_storage:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
cpe:2.3:a:redhat:openshift_container_platform:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·Red Hat
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* Versions 31 Vulnerable ·Fedoraproject
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian

Remediation

Red Hat 1 advisory

RHSA-2020:3003 Released 2020-07-20 · Red Hat rating Moderate
Red Hat Ceph Storage 4.1 security and bug fix update
- Red Hat Ceph Storage 4.1 MON ceph-2:14.2.8-81.el7cp, ceph-2:14.2.8-81.el8cp, ceph-base-2:14.2.8-81.el7cp +47
- Red Hat Ceph Storage 4.1 OSD ceph-2:14.2.8-81.el7cp, ceph-2:14.2.8-81.el8cp, ceph-base-2:14.2.8-81.el7cp +39
- Red Hat Ceph Storage 4.1 Tools ceph-2:14.2.8-81.el7cp, ceph-2:14.2.8-81.el8cp, ceph-ansible-4.0.25-1.el7cp +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Ceph Storage 2	Affected	No fix planned: Out of support scope
Red Hat Ceph Storage 3	Affected	No fix yet
Red Hat OpenStack Platform 15 (Stein)	Affected	No fix planned: Will not fix
Red Hat Openshift Container Storage 4	Affected	No fix planned: Will not fix
Red Hat Ceph Storage 4.1 MON	Fixed	RHSA-2020:3003
Red Hat Ceph Storage 4.1 OSD	Fixed	RHSA-2020:3003
Red Hat Ceph Storage 4.1 Tools	Fixed	RHSA-2020:3003

Not affected: 2 products

Red Hat Enterprise Linux 8
Red Hat OpenStack Platform 13 (Queens)

Timeline

2026-10-02 Threatist record created from CVE-2020-1760
2026-10-03 Alias added: GHSA-gj74-48rr-85f7

References

Patch 1

https://www.openwall.com/lists/oss-security/2020/04/07/1

Advisory 5

Other 1

[debian-lts-announce] 20231023 [SECURITY] [DLA 3629-1] ceph security update

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences