CVE-2025-66417-POC

CVE-2025-66417 प्रमाण अवधारणा CVE-2025-66417 root@kitploit: POST /front/inventory.php HTTP/1.1 Host: Accept-Encoding: gzip, deflate, br Accept: text/html Connection: keep-alive Content-Type: text/xml Content-Length: 429 getparams...

The vulnerability of the RGWPostObj_ObjStore_S3::get_params() function (rgw_rest_s3.cc) in the RGW storage service of the Ceph system allows a attacker to circumvent security restrictions and upload arbitrary files.

The vulnerability of the RGWPostObjObjStoreS3::getparams function rgwrests3.cc in the RGW storage service of the Ceph system is related to deficiencies in access control when processing bucket keys. Exploiting this vulnerability allows an attacker to bypass security restrictions and upload...