CVE-2013-2101

CWE-79 — Cross-site Scripting (XSS)6 documents6 sources
Severity
5.4MEDIUM
EPSS
0.3%
top 50.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Katello KatelloRedhat Satellite
Timeline
PublishedDec 3
Latest updateMay 5

Description

Katello has multiple XSS issues in various entities

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5katello/katellothrough 2013-05-16

🔴Vulnerability Details

2
GHSA
GHSA-h2xj-h22h-459c: Katello has multiple XSS issues in various entities↗2022-05-05
▶
CVEList
CVE-2013-2101: Katello has multiple XSS issues in various entities↗2019-12-03
▶

💥Exploits & PoCs

1
Exploit-DB
McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method↗2013-03-29
▶

📋Vendor Advisories

1
Red Hat
Katello: Multiple XSS in various entities↗2014-07-11
▶

💬Community

1
Bugzilla
CVE-2013-2101 Katello: Multiple XSS in various entities↗2013-05-16
▶
CVE-2013-2101 (MEDIUM CVSS 5.4) | Katello has multiple XSS issues in | cvebase.io