VDB
DEBIAN-CVE-2020-1760
DEBIAN-CVE-2020-1760
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Record from OSV · Published April 23, 2020
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| ceph | Debian:13 | 14.2.9-1 |
| ceph | Debian:12 | 14.2.9-1 |
| ceph | Debian:14 | 14.2.9-1 |
Risk scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | ceph | 0 |
| Debian:12 | ceph | 0 |
| Debian:14 | ceph | 0 |
Timeline
- Apr 23, 2020 CVE Published
- Oct 26, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2020-1760
vulnetix vdb fixes DEBIAN-CVE-2020-1760Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2020-1760/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart