https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:02:59 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-00286 bdu:2022-00286 https://cve.radiocsirt.org/vuln/bdu:2022-00286 https://cve.radiocsirt.org/vuln/euvd-2026-20891 EUVD-2026-20891 https://cve.radiocsirt.org/vuln/euvd-2026-20891 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3509 <p>A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The greatest threat to the system is for confidentiality, integrity, and availability.</p> <p>A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The greatest threat to the system is for confidentiality, integrity, and availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3509 https://cve.radiocsirt.org/vuln/ghsa-g9cr-7jh8-qrmx <p>A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The greatest threat to the system is for confidentiality, integrity, and availability.</p> <p>A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The greatest threat to the system is for confidentiality, integrity, and availability.</p> https://cve.radiocsirt.org/vuln/ghsa-g9cr-7jh8-qrmx https://cve.radiocsirt.org/vuln/gsd-2021-3509 gsd-2021-3509 https://cve.radiocsirt.org/vuln/gsd-2021-3509 https://cve.radiocsirt.org/vuln/rhsa-2021:2445 <p>ceph-dashboard: Don&#39;t use Browser&#39;s LocalStorage for storing JWT but Secure Cookies with proper HTTP Headers ceph-dashboard: Cross-site scripting via token Cookie ceph: Unauthorized global_id reuse in cephx</p> <p>ceph-dashboard: Don&#39;t use Browser&#39;s LocalStorage for storing JWT but Secure Cookies with proper HTTP Headers ceph-dashboard: Cross-site scripting via token Cookie ceph: Unauthorized global_id reuse in cephx</p> https://cve.radiocsirt.org/vuln/rhsa-2021:2445 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3509 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ceph</p> <p>A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The greatest threat to the system is for confidentiality, integrity, and availability.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: ceph</p> <p>A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The greatest threat to the system is for confidentiality, integrity, and availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3509 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2729 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Ceph Storage ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Ceph Storage ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2729