https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:29:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-00933 bdu:2023-00933 https://cve.radiocsirt.org/vuln/bdu:2023-00933 https://cve.radiocsirt.org/vuln/euvd-2026-227135 EUVD-2026-227135 https://cve.radiocsirt.org/vuln/euvd-2026-227135 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47950 <p>An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).</p> <p>An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-47950 https://cve.radiocsirt.org/vuln/ghsa-274c-rx2j-2v3x <p><strong>Affected:</strong> PyPI: swift</p> <p>An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).</p> <p><strong>Affected:</strong> PyPI: swift</p> <p>An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).</p> https://cve.radiocsirt.org/vuln/ghsa-274c-rx2j-2v3x https://cve.radiocsirt.org/vuln/gsd-2022-47950 gsd-2022-47950 https://cve.radiocsirt.org/vuln/gsd-2022-47950 https://cve.radiocsirt.org/vuln/pysec-2026-927 <p><strong>Affected:</strong> PyPI: swift</p> <p>An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).</p> <p><strong>Affected:</strong> PyPI: swift</p> <p>An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).</p> https://cve.radiocsirt.org/vuln/pysec-2026-927 https://cve.radiocsirt.org/vuln/rhsa-2023:1013 <p>openstack-swift: Arbitrary file access through custom S3 XML entities</p> <p>openstack-swift: Arbitrary file access through custom S3 XML entities</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1013 https://cve.radiocsirt.org/vuln/suse-su-2023:0323-1 <p>Security update for python-swift3</p> <p>Security update for python-swift3</p> https://cve.radiocsirt.org/vuln/suse-su-2023:0323-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47950 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: swift, Ubuntu:20.04:LTS: swift, Ubuntu:22.04:LTS: swift</p> <p>An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: swift, Ubuntu:20.04:LTS: swift, Ubuntu:22.04:LTS: swift</p> <p>An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47950 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0518 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0518