CVE-2021-3524 Other in ceph
Attackers can inject HTTP headers via CORS configuration in Ceph RadosGW, potentially bypassing security controls or modifying responses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-3524?
CVE-2021-3524 is a medium-severity vulnerability in Debian Debian Linux, published on 17 May 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
Which versions are affected by CVE-2021-3524?
It affects 4 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Redhat Ceph, Redhat Ceph Storage.
How do I fix CVE-2021-3524?
Upgrade to a fixed version.
Is CVE-2021-3524 being exploited?
There is no known exploitation of CVE-2021-3524 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2021-3524, GHSA-3rmw-wm6w-rmcr, MGASA-2021-0223, UBUNTU-CVE-2021-3524.