3.5
Low
CVE-2017-7538 A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8
Description
A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Satellite | 5.8 | No fix stated |
References
- bugzilla.redhat.com bugzilla.redhat.com
- 1039267 www.securitytracker.com
- RHSA-2017:2645 access.redhat.com
Timeline
- Published
- Last modified