CVE-2022-47950: XEE
An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/swiftto a version that resolves this vulnerability.Fixed in 2.30.1 - Upgrade
Upgrade
pip/swiftto a version that resolves this vulnerability.Fixed in 2.29.2 - Upgrade
Upgrade
pip/swiftto a version that resolves this vulnerability.Fixed in 2.28.1 - Upgrade
Upgrade
debian/swiftto a version that resolves this vulnerability.Fixed in 2.30.1-0+deb12u1Fixed in 2.30.1-0+deb12u3Fixed in 2.35.1-0+deb13u3Fixed in 2.35.1-0+deb13u4Fixed in 2.38.2-3 - Upgrade
Upgrade
debian/swiftto a version that resolves this vulnerability.Fixed in 2.30.0-4
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue in OpenStack Swift?
The vulnerability ID for this issue in OpenStack Swift is CVE-2022-47950.
What is the severity of CVE-2022-47950?
The severity of CVE-2022-47950 is medium with a CVSS score of 6.5.
How does the vulnerability in OpenStack Swift occur?
The vulnerability in OpenStack Swift occurs when an authenticated user supplies crafted XML files.
What can an authenticated user do with the vulnerability in OpenStack Swift?
An authenticated user can coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data.
Which versions of OpenStack Swift are affected by this vulnerability?
Versions before 2.28.1, 2.29.x before 2.29.2, and 2.30.0 of OpenStack Swift are affected by this vulnerability.