24 matches found
CVE-2026-56098: Observable Discrepancy
A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execution fall-through in the registryauthorize filter. While the application identifies unauthorized requests and triggers an error response via the unauthorized...
CVE-2026-56097: Improper Neutralization of Special Elements used in an SQL Command
A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used in database queries within the RegistryProxiesController. The methods checkblobpushorglabel and...
PT-2026-103960
Name of the Vulnerable Software and Affected Versions rubygem-katello affected versions not specified Description An authorization bypass exists in the RegistryProxiesController within Katello due to an execution fall-through in the registry authorize filter. Although the application detects...
