漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Ceph 输入验证错误漏洞
Vulnerability Description
Red Hat Ceph是美国红帽(Red Hat)公司的一套Linux PB级分布式文件系统。该系统的主要目标是设计成基于POSIX(可移植操作系统接口)的没有单点故障的分布式文件系统,使数据能容错和无缝的复制。 Ceph 1.3.x版本和2.x版本存在输入验证错误漏洞,远程未经身份验证的攻击者可以利用此漏洞通过发送特制的跨源HTTP请求来导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A