ceph-common vulnerabilities

Known vulnerabilities in the ceph-common package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Insufficient Verification of Data Authenticity	<2:19.2.0-55.el9cp
H Insufficient Verification of Data Authenticity	*
H Insufficient Verification of Data Authenticity	*
H Insufficient Verification of Data Authenticity	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Directory Traversal	<2:16.2.10-266.el9cp
M Allocation of Resources Without Limits or Throttling	<2:16.2.10-266.el9cp
M NULL Pointer Dereference	*
C Directory Traversal	<2:18.2.1-194.el9cp
C Resource Exhaustion	<2:18.2.1-194.el9cp
C CVE-2023-4822	<2:18.2.1-194.el9cp
C Authentication Bypass by Primary Weakness	<2:18.2.1-194.el9cp
C Directory Traversal	<2:17.2.6-216.el9cp
M Improper Input Validation	<2:16.2.10-248.el9cp
M Insufficient Granularity of Access Control	<2:16.2.10-248.el9cp
M Improper Input Validation	<2:17.2.6-148.el9cp
M Missing Synchronization	<2:17.2.6-167.el9cp
M Improper Access Control	<2:17.2.6-167.el9cp
M Resource Exhaustion	<2:16.2.10-266.el9cp
M Insufficient Granularity of Access Control	<2:17.2.6-148.el9cp
M Inefficient Regular Expression Complexity	*
M Improper Handling of URL Encoding (Hex Encoding)	*
H Placement of User into Incorrect Group	<2:16.2.10-138.el9cp
M Incorrect Authorization	<2:16.2.8-84.el9cp
M Resource Exhaustion	*
M Resource Exhaustion	<2:17.2.6-70.el9cp
L Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	<2:17.2.6-70.el9cp
M Overly Restrictive Regular Expression	*
M Overly Restrictive Regular Expression	*
M Directory Traversal	<2:16.2.10-94.el9cp
M Out-of-bounds Read	*
M Cross-site Scripting (XSS)	<2:17.2.6-148.el9cp
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	<2:17.2.6-148.el9cp
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	<2:17.2.6-148.el9cp

Vulnerability

Vulnerable Version

Insufficient Verification of Data Authenticity

<2:19.2.0-55.el9cp

Insufficient Verification of Data Authenticity