~ / search / GHSA-8fxc-qm65-vpxg

GHSA-8fxc-qm65-vpxg

Temporary urls leaked via logging

Source: GitHub Advisory Database (reviewed) Low CVE-2017-8761

Packages

EcosystemPackageAffectedFixed in
PyPI swift < 2.15.2 2.15.2

Details

As written in the advisory (Markdown source, shown as plain text).

In OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.

References

External links from the advisory. They lead to third-party sites.