VDB
DEBIAN-CVE-2020-27839
DEBIAN-CVE-2020-27839
PUBLISHED
CVSS 5.400000095367432 MEDIUM
A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | ceph | 0, 0, 0 |
| Debian:12 | ceph | 0, 0, 0 |
| Debian:11 | ceph | 0, 0, 0 |
| Debian:13 | ceph | 0, 0, 0 |
Timeline
- May 26, 2021 CVE Published
- Apr 28, 2026 CVE Updated