CVE-2017-1002152

Bodhi 2.9.0 and lower are affected by CVE-2017-1002152 due to incorrect validation of bug titles, causing cross-site scripting and potential code injection. The issue is documented across multiple sources (OSV, GHSA, Fedora advisories) with the remediation to upgrade to Bodhi 2.9.1. No exploitati...

CVE-2020-15855

Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1. Public documents attribute the issues to Bodhi’s web UI components, specifically inputs in pages such as overrides.html and updates.html, leading to XSS when user-supplied data is not safely handled. Remediation: upgrade to Bodhi...