CVE-2021-3524

CVE-2021-3524 is a medium-severity vulnerability affecting Red Hat Ceph Storage RadosGW versions prior to 14.2.21, as well as Debian and Fedora Project distributions. It involves an HTTP header injection flaw due to improper handling of newline characters in the CORS ExposeHeader tag, allowing an attacker to inject arbitrary headers into responses. The CVSS score is 6.5, indicating a network-based attack with low complexity, requiring no privileges, and leading to high integrity impact without affecting confidentiality or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.