CVE-2024-48916

Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an JWT that has "none" as JWT alg. And by doing so the JWT signature is not checked. The vulnerability is most likely in the RadosGW OIDC provider. As of time of publication, a known patched version has yet to be published.

• CWE-345

• https://github.com/ceph/ceph/security/advisories/GHSA-5g9m-mmp6-93mq

Published

Jul 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-48910DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanit…9.8
• CVE-2024-48911OpenCanary, a multi-protocol network honeypot, directly exec…7.8
• CVE-2024-48912GLPI is a free asset and IT management software package. Sta…8.1
• CVE-2024-48913Hono, a web framework, prior to version 4.6.5 is vulnerable …5.9
• CVE-2024-48914Vendure is an open-source headless commerce platform. Prior …9.1
• CVE-2024-48915Agent Dart is an agent library built for Internet Computer f…8.7
• CVE-2024-48917PhpSpreadsheet is a PHP library for reading and writing spre…7.5
• CVE-2024-48918RDS Light is a simplified version of the Reflective Dialogue…8.1
• CVE-2024-48919Cursor is a code editor built for programming with AI. Prior…9.2
• CVE-2024-4892The BuddyPress plugin for WordPress is vulnerable to Stored …5.4
• CVE-2024-48920PutongOJ is online judging software. Prior to version 2.1.0-…9.1
• CVE-2024-48921Kyverno is a policy engine designed for Kubernetes. A kyvern…2.7