Lucene search

K
osvGoogleOSV:USN-6613-1
HistoryJan 29, 2024 - 6:08 p.m.

ceph vulnerability

2024-01-2918:08:52
Google
osv.dev
5
ceph
security
vulnerability
file upload
authorization
bypass
post requests

6.6 Medium

AI Score

Confidence

Low

Lucas Henry discovered that Ceph incorrectly handled specially
crafted POST requests. An uprivileged user could use this to
bypass Ceph’s authorization checks and upload a file to any bucket.