Skip to content
Sign in
3.5 Low

CVE-2017-7538 A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8

Description

A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users.

Affected products and versions

Product Affected versions Fixed in
Satellite 5.8 No fix stated

Other CVEs of Satellite

The 2 CVEs of Satellite →
CVE-2017-12175 Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use… 3.5 Low
Track this CVE