CVE-2026-50221

Katalog CVE

CVSS 5.4 · Medium EPSS 0,22%

Kerentanan Server-Side Request Forgery (SSRF) pada openstack swift. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

In OpenStack Swift before 2.37.2, proxy-server does not strip internal update headers (X-Container-Host, X-Container-Device, X-Delete-At-Host, X-Delete-At-Device) from client requests before forwarding them to object-servers. An authenticated user with write access can inject these headers to redirect container update requests to an attacker-controlled server, enabling server-side request forgery. The SSRF requests expose internal cluster metadata including storage policy indexes, partition mappings, device names, and when at rest encryption is enabled, cipher text and initialization vectors for the container-level encryption key. The attacker can also cause "ghost listings" in arbitrary containers via the shard-range redirect mechanism.

Rincian

Terbit di NVD

23 Juni 2026

Terakhir diubah

29 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://launchpad.net/bugs/2150261 exploit · issue tracking · advisory vendor
• https://security.openstack.org/ossa/OSSA-2026-024.html patch · advisory vendor
• https://www.openwall.com/lists/oss-security/2026/06/23/5 mailing list · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2026/06/23/5 mailing list · patch · advisory pihak ketiga