PT-2020-2775

Name of the Vulnerable Software and Affected Versions Spacewalk versions up to 2.9 Description A flaw in Spacewalk allows for XML internal entity attacks via the "/rpc/api" endpoint. This could enable an unauthenticated remote attacker to retrieve certain file contents, trigger a denial of servic...