Skip to content
OpenAdvisories
Medium DLA-3281-1 1 CVE

swift - security update

Published Jan 25, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 swift 2.19.1-1+deb10u1

Vulnerabilities 1

  • Medium 6.5

    OpenStack Swift XML external entities (XXE) Injection

    An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read…