| Package | Affected versions | Patched versions |
|---|---|---|
| spacewalk | < 2.9 | 2.9 |
A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute arbitrary code on the Spacewalk server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free