Satellite: Spacewalk contains multiple XSS (stored and reflected)

Stored and reflected cross-site scripting XSS flaws were found in the way spacewalk-java displayed certain information. By sending a specially crafted request to Satellite, a remote, authenticated attacker could embed HTML content into the stored data, allowing them to inject malicious content in...