CVE-2018-16887: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to...

PT-2018-2570

Name of the Vulnerable Software and Affected Versions Satellite katello versions prior to 3.9.0 Description A cross-site scripting XSS flaw was found in the katello component of Satellite, allowing an attacker with privileges to create or edit organizations and locations to execute XSS attacks...