Lucene search

K
githubGitHub Advisory DatabaseGHSA-8FXC-QM65-VPXG
HistoryJun 08, 2021 - 7:23 p.m.

Temporary urls leaked via logging

2021-06-0819:23:22
CWE-117
CWE-200
GitHub Advisory Database
github.com
28

0.001 Low

EPSS

Percentile

22.0%

In OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.

CPENameOperatorVersion
swiftlt2.15.2

0.001 Low

EPSS

Percentile

22.0%