Cross-site Scripting (XSS)

2019-05-0205:07:04

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

39.9%

JSON

spacewalk is vulnerable to cross-site scripting (XSS). The vulnerability exists as remotely authenticated users can inject arbitrary web script through the System Groups field.

CPENameOperatorVersion
jabberdeq2.2.8__16.el6sat
jabberdeq2.2.8__22.el6sat
jabberdeq2.2.8__20.el6sat
jabberdeq2.2.8__12.el6sat
jabberdeq2.2.8__19.el6sat
simple-coreeq3.1.3__2.el6sat
simple-coreeq3.1.3__3.el6sat
spacewalk-certs-toolseq1.1.1__2.el6sat
spacewalk-certs-toolseq2.0.1__2.el6sat
spacewalk-certs-toolseq1.1.1__1.el6sat

Name	Operator	Version
jabberd	eq	2.2.8__16.el6sat
jabberd	eq	2.2.8__22.el6sat
jabberd	eq	2.2.8__20.el6sat
jabberd	eq	2.2.8__12.el6sat
jabberd	eq	2.2.8__19.el6sat
simple-core	eq	3.1.3__2.el6sat
simple-core	eq	3.1.3__3.el6sat
spacewalk-certs-tools	eq	1.1.1__2.el6sat
spacewalk-certs-tools	eq	2.0.1__2.el6sat
spacewalk-certs-tools	eq	1.1.1__1.el6sat