CVE-2020-15855

Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1. Public documents attribute the issues to Bodhi’s web UI components, specifically inputs in pages such as overrides.html and updates.html, leading to XSS when user-supplied data is not safely handled. Remediation: upgrade to Bodhi...