https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:23:55 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01044 bdu:2019-01044 https://cve.radiocsirt.org/vuln/bdu:2019-01044 https://cve.radiocsirt.org/vuln/cnvd-2019-01375 cnvd-2019-01375 https://cve.radiocsirt.org/vuln/cnvd-2019-01375 https://cve.radiocsirt.org/vuln/euvd-2026-68420 EUVD-2026-68420 https://cve.radiocsirt.org/vuln/euvd-2026-68420 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16887 <p>A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Versions before 3.9.0 are vulnerable.</p> <p>A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Versions before 3.9.0 are vulnerable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16887 https://cve.radiocsirt.org/vuln/ghsa-mhhc-r88h-2qrm <p><strong>Affected:</strong> RubyGems: katello</p> <p>A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Versions before 3.9.0 are vulnerable.</p> <p><strong>Affected:</strong> RubyGems: katello</p> <p>A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Versions before 3.9.0 are vulnerable.</p> https://cve.radiocsirt.org/vuln/ghsa-mhhc-r88h-2qrm https://cve.radiocsirt.org/vuln/gsd-2018-16887 gsd-2018-16887 https://cve.radiocsirt.org/vuln/gsd-2018-16887 https://cve.radiocsirt.org/vuln/rhsa-2019:1222 <p>RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack pulp: Improper path parsing leads to overwriting of iso repositories foreman: Persisted XSS on all pages that use breadcrumbs foreman: stored XSS in success notification after entity creation katello: stored XSS in subscriptions and repositories pages candlepin: credentials exposure through log files</p> <p>RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack pulp: Improper path parsing leads to overwriting of iso repositories foreman: Persisted XSS on all pages that use breadcrumbs foreman: stored XSS in success notification after entity creation katello: stored XSS in subscriptions and repositories pages candlepin: credentials exposure through log files</p> https://cve.radiocsirt.org/vuln/rhsa-2019:1222