katello Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-16887 · ADVISORY
• access.redhat.com/errata/RHSA-2019:1222 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• Katello/katello · PACKAGE
• rubysec/ruby-advisory-db · WEB

katello のその他の脆弱性

• CVE-2026-12515中 4.3A flaw was found in Katello's of Red Hat Satellite. A content upload functionality where insufficient authorization checks in the ContentUpl…
• CVE-2026-4324中 5.4A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, al…
• CVE-2019-14825低 2.7A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during con…
• CVE-2018-14623中 4.3A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed S…
• CVE-2017-2662中 4.3A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filte…