PYSEC-2026-751

vendorUSosv

Temporary urls leaked via logging

view advisory published 2026-07-02Licence: CC-BY-4.0

In OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-8761US	medium4.3	0.80% (56th)	—	2021-06-02
In OpenStack Swift through 2.10.1, 2.11.0 through 2.13.0, and 2.14.0, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read…

references

External citations — patches, advisories, analysis.

https://bugs.launchpad.net/swift/+bug/1685798/comments/18WEB
https://github.com/advisories/GHSA-8fxc-qm65-vpxgADVISORY
https://launchpad.net/bugs/1685798WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-8761ADVISORY
https://pypi.org/project/swiftPACKAGE

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan