The Katello Project Katello vulnerabilities

1 known vulnerability affecting the_katello_project/katello.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-16887MEDIUMCVSS 5.4v3.9.02019-01-13

CVE-2018-16887 [MEDIUM] CWE-79 CVE-2018-16887: A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF t