| Package | Affected versions | Patched versions |
|---|---|---|
| satellite | < 5.8 | 5.8 |
A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free