Ubuntu Security Notice 6613-1 - Lucas Henry discovered that Ceph incorrectly handled specially crafted POST requests. An unprivileged user could use this to bypass Ceph's authorization checks and upload a file to any bucket.
dea0ef831400997642252a550e02200a9abf58a74817bc281c5715f96a9a5da3