CVE-2020-1760 Cross-site scripting in ceph
An attacker can execute arbitrary scripts in the Ceph Object Gateway via untrusted input in anonymous S3 requests, potentially compromising user sessions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-1760?
CVE-2020-1760 is a medium-severity cross-site scripting vulnerability in Canonical Ubuntu Linux, published on 23 Apr 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
Weakness: CWE-79
Which versions are affected by CVE-2020-1760?
1 open source package ship an affected version, including ceph. It affects 6 products.
| Package | Affected | Fixed in |
|---|---|---|
ceph Bitnami | All versions | 14.2.21 |
Linux distribution packages (7)
ceph SUSE:Enterprise Storage 5 | All versions | 12.2.12+git.1585658687.363df3a813-2.42.4 |
ceph SUSE:Linux Enterprise Server 12 SP4 | All versions | 12.2.12+git.1585658687.363df3a813-2.42.4 |
ceph SUSE:Linux Enterprise Server 12 SP5 | All versions | 12.2.12+git.1585658687.363df3a813-2.42.4 |
ceph SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 12.2.12+git.1585658687.363df3a813-2.42.4 |
ceph SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 12.2.12+git.1585658687.363df3a813-2.42.4 |
ceph SUSE:Linux Enterprise Software Development Kit 12 SP4 | All versions | 12.2.12+git.1585658687.363df3a813-2.42.4 |
ceph SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 12.2.12+git.1585658687.363df3a813-2.42.4 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Linuxfoundation Ceph, Redhat Ceph Storage, Redhat Openshift Container Platform.
How do I fix CVE-2020-1760?
Upgrade ceph to 14.2.21 or later.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2020-1760 being exploited?
There is no known exploitation of CVE-2020-1760 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as BIT-ceph-2020-1760, DEBIAN-CVE-2020-1760, DLA-2171-1, GHSA-gj74-48rr-85f7, SUSE-SU-2020:0962-1, UBUNTU-CVE-2020-1760.