title: Red Hat Security Advisory: Red Hat Ceph Storage 4.1 security and bug fix update
description: ceph: header-splitting in RGW GetObject has a possible XSS ceph: radosgw: HTTP header injection via CORS ExposeHeader tag
cpes: cpe:/a:redhat:ceph_storage:4::el7 cpe:/a:redhat:ceph_storage:4::el8