CVE-2020-1760

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.

View graph Watch Export

CVSS v3.1

5.8 MEDIUM

EPSS

1.56%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

EPSS Trend

Aug 16, 2026 → Sep 19, 2026

▲ 0.03pp

1.52% → 1.56% over 3 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityHIGH

Privileges RequiredNONE

User InteractionREQUIRED

ScopeCHANGED

ConfidentialityLOW

IntegrityLOW

AvailabilityLOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Connections

7 relationships

openshift container platform

Timeline

disclosure → media coverage

Apr 23, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024