Skip to content
OpenAdvisories
Medium USN-5852-1 1 CVE

swift vulnerability

Published Feb 9, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenStack Swift incorrectly handled certain XML
files. A remote authenticated user could possibly use this issue to obtain
arbitrary file contents containing sensitive information from the server.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS swift 2.25.2-0ubuntu1.1
Ubuntu · 22.04 LTS 22.04:LTS swift 2.29.2-0ubuntu1

Vulnerabilities 1

  • Medium 6.5
    CVE-2022-47950

    OpenStack Swift XML external entities (XXE) Injection

    An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read…

    swift swift swift Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-47950