https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:43:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-68366 EUVD-2026-68366 https://cve.radiocsirt.org/vuln/euvd-2026-68366 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16861 <p>A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.</p> <p>A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16861 https://cve.radiocsirt.org/vuln/ghsa-w3p6-8cgj-c9xc <p>A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.</p> <p>A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.</p> https://cve.radiocsirt.org/vuln/ghsa-w3p6-8cgj-c9xc https://cve.radiocsirt.org/vuln/gsd-2018-16861 gsd-2018-16861 https://cve.radiocsirt.org/vuln/gsd-2018-16861 https://cve.radiocsirt.org/vuln/rhsa-2019:1222 <p>RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack pulp: Improper path parsing leads to overwriting of iso repositories foreman: Persisted XSS on all pages that use breadcrumbs foreman: stored XSS in success notification after entity creation katello: stored XSS in subscriptions and repositories pages candlepin: credentials exposure through log files</p> <p>RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack pulp: Improper path parsing leads to overwriting of iso repositories foreman: Persisted XSS on all pages that use breadcrumbs foreman: stored XSS in success notification after entity creation katello: stored XSS in subscriptions and repositories pages candlepin: credentials exposure through log files</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1222