https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:04:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-46722 EUVD-2026-46722 https://cve.radiocsirt.org/vuln/euvd-2026-46722 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27839 <p>A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p>A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-27839 https://cve.radiocsirt.org/vuln/ghsa-2c8x-3ppx-9gj3 <p>A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p>A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ghsa-2c8x-3ppx-9gj3 https://cve.radiocsirt.org/vuln/gsd-2020-27839 gsd-2020-27839 https://cve.radiocsirt.org/vuln/gsd-2020-27839 https://cve.radiocsirt.org/vuln/rhsa-2021:2445 <p>ceph-dashboard: Don&#39;t use Browser&#39;s LocalStorage for storing JWT but Secure Cookies with proper HTTP Headers ceph-dashboard: Cross-site scripting via token Cookie ceph: Unauthorized global_id reuse in cephx</p> <p>ceph-dashboard: Don&#39;t use Browser&#39;s LocalStorage for storing JWT but Secure Cookies with proper HTTP Headers ceph-dashboard: Cross-site scripting via token Cookie ceph: Unauthorized global_id reuse in cephx</p> https://cve.radiocsirt.org/vuln/rhsa-2021:2445 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-27839 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ceph</p> <p>A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ceph</p> <p>A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-27839 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2729 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Ceph Storage ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Ceph Storage ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2729