| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | < 5.8.0 | 5.8.0 |
A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free