Cross-site scripting in Ceph - CVE-2021-3509

Vulnerability identifier: #VU53310

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2021-3509

CWE-ID: CWE-79

Exploitation vector: Remote access

Exploit availability: No public exploit available

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data passed via JWT token in HTTP cookie. A remote attacker can inject and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Ceph
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE CaaS Platform
SUSE MicroOS
SUSE Enterprise Storage
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
Fedora
python3-rados-debuginfo
ceph-fuse-debuginfo
ceph-fuse
ceph-base-debuginfo
ceph-base
ceph
rados-objclass-devel
python3-rgw-debuginfo
python3-rgw
python3-rbd-debuginfo
python3-rbd
ceph-mds
python3-rados
python3-cephfs-debuginfo
python3-cephfs
python3-ceph-argparse
librgw2-debuginfo
librgw2
librgw-devel
librbd1-debuginfo
librbd1
librbd-devel
rbd-fuse
ceph-prometheus-alerts
ceph-mgr-rook
ceph-mgr-diskprediction-local
ceph-mgr-dashboard
ceph-grafana-dashboards
rbd-nbd-debuginfo
rbd-nbd
rbd-mirror-debuginfo
rbd-mirror
rbd-fuse-debuginfo
libradospp-devel
cephfs-shell
ceph-radosgw-debuginfo
ceph-radosgw
ceph-osd-debuginfo
ceph-osd
ceph-mon-debuginfo
ceph-mon
ceph-mgr-debuginfo
ceph-mgr
ceph-mds-debuginfo
librados2-debuginfo
ceph-common
ceph-common-debuginfo
ceph-debugsource
libcephfs-devel
libcephfs2
libcephfs2-debuginfo
librados-devel
librados-devel-debuginfo
librados2
python3-ceph-common
cephadm

Install updates from vendor's website.

Ceph - addressed in versions 14.2.21, 15.2.12, 16.2.4
python3-rados-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-fuse-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-fuse - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-base-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-base - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph - update to 14.2.21.403+g69ab6ea274d-3.63.1
rados-objclass-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-rgw-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-rgw - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-rbd-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-rbd - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-mds - update to 14.2.21.403+g69ab6ea274d-3.63.1
python3-rados - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-cephfs-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-cephfs - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-ceph-argparse - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librgw2-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librgw2 - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librgw-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librbd1-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librbd1 - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librbd-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
rbd-fuse - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-prometheus-alerts - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mgr-rook - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mgr-diskprediction-local - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mgr-dashboard - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-grafana-dashboards - update to 14.2.21.403+g69ab6ea274d-3.63.1
rbd-nbd-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
rbd-nbd - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
rbd-mirror-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
rbd-mirror - update to 14.2.21.403+g69ab6ea274d-3.63.1
rbd-fuse-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
libradospp-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
cephfs-shell - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-radosgw-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-radosgw - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-osd-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-osd - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mon-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mon - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mgr-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mgr - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mds-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
librados2-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-common - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-common-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-debugsource - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
libcephfs-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
libcephfs2 - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
libcephfs2-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librados-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librados-devel-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librados2 - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-ceph-common - update to 15.2.12.83+g528da226523-3.25.1
cephadm - update to 15.2.12.83+g528da226523-3.25.1
ceph - update to 16.2.4-1.fc34

• http://seclists.org/oss-sec/2021/q2/140
• https://github.com/ceph/ceph/commit/adda853e64bdba1288d46bc7d462d23d8f2f10ca

• Cross-site scripting in Ceph
• Fedora 34 update for ceph
• SUSE update for ceph
• SUSE update for ceph