Описание
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Satellite 5.6 | Server | Affected | ||
| Red Hat Satellite 5.7 | ace-editor | Fixed | RHSA-2015:0033 | 12.01.2015 |
| Red Hat Satellite 5.7 | antlr | Fixed | RHSA-2015:0033 | 12.01.2015 |
| Red Hat Satellite 5.7 | apache-commons-beanutils | Fixed | RHSA-2015:0033 | 12.01.2015 |
| Red Hat Satellite 5.7 | apache-commons-cli | Fixed | RHSA-2015:0033 | 12.01.2015 |
| Red Hat Satellite 5.7 | bootstrap | Fixed | RHSA-2015:0033 | 12.01.2015 |
| Red Hat Satellite 5.7 | bootstrap-datepicker | Fixed | RHSA-2015:0033 | 12.01.2015 |
| Red Hat Satellite 5.7 | c3p0 | Fixed | RHSA-2015:0033 | 12.01.2015 |
| Red Hat Satellite 5.7 | cglib | Fixed | RHSA-2015:0033 | 12.01.2015 |
| Red Hat Satellite 5.7 | cobbler | Fixed | RHSA-2015:0033 | 12.01.2015 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=1156299Spacewalk: multiple XSS
EPSS
Процентиль: 40%
0.00184
Низкий
3.5 Low
CVSS2
Связанные уязвимости
nvd
около 11 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
github
больше 3 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the REST API.
EPSS
Процентиль: 40%
0.00184
Низкий
3.5 Low
CVSS2