FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-01-30 04:04:33 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
f20eb9a4-dfea-11ea-a9b8-9c5c8e84d621ceph14 -- HTTP header injection via CORS ExposeHeader tag

Red Hat bugzilla reports:

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made.


Discovery 2020-05-27
Entry 2020-08-16
ceph14
< 14.2.11

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10753
CVE-2020-10753
ports/248673