Cross-Site Scripting (XSS)

2020-08-0400:47:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

20.7%

JSON

katello is vulnerable to cross-site scripting. Multiple XSS in various entities allow an attacker to inject and execute arbitary Javascript in a user’s browser.

CPENameOperatorVersion
ruby193-rubygem-anemoneeq0.7.2__10.el6_4
ruby193-rubygem-foreman_bootdiskeq1.2.1__1.el6sat
python-requestseq1.1.0__3.1.1.el6
python-requestseq1.1.0__8.1.el7ost
python-requestseq1.1.0__8.1.el6
python-requestseq1.1.0__3.el6ost
python-oauth2eq1.5.170__2.pulp.el6
python-oauth2eq1.5.170__3.pulp.el6sat
python-oauth2eq1.2.1__3.el6_0
python-pymongoeq2.5.2__2.el7ost

Name	Operator	Version
ruby193-rubygem-anemone	eq	0.7.2__10.el6_4
ruby193-rubygem-foreman_bootdisk	eq	1.2.1__1.el6sat
python-requests	eq	1.1.0__3.1.1.el6
python-requests	eq	1.1.0__8.1.el7ost
python-requests	eq	1.1.0__8.1.el6
python-requests	eq	1.1.0__3.el6ost
python-oauth2	eq	1.5.170__2.pulp.el6
python-oauth2	eq	1.5.170__3.pulp.el6sat
python-oauth2	eq	1.2.1__3.el6_0
python-pymongo	eq	2.5.2__2.el7ost