{"id":"CVE-2017-8761","aliases":["GHSA-8fxc-qm65-vpxg","PYSEC-2026-751"],"title":"Temporary urls leaked via logging","summary":"Temporary urls leaked via logging","severity":"low","vendor":"swift","product":"swift","ecosystem":"pip","affected":["swift < 2.15.2"],"patched":["swift 2.15.2"],"published":"2021-06-08","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-8fxc-qm65-vpxg","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8761"},{"url":"https://bugs.launchpad.net/swift/+bug/1685798/comments/18"},{"url":"https://launchpad.net/bugs/1685798"}],"tags":["osv","pip"],"epss":0.00795,"epssPercentile":0.5446,"ingestedAt":"2026-07-08T18:25:47.475Z","slug":"CVE-2017-8761","body":"## Overview\n\nIn OpenStack Swift prior to 2.15.2, the proxy-server logs full tempurl paths, potentially leaking reusable tempurl signatures to anyone with read access to these logs. All Swift deployments using the tempurl middleware are affected.\n\n## Affected packages\n\n- `swift < 2.15.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `swift 2.15.2`","depth":"sunlit","depthScore":14,"depthScoreParts":{"impact":13.8,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}