CVE-2013-2101 - Katello: Multiple XSS in various entities

MEDIUM

Katello: Multiple XSS in various entities

Published Dec 3, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 0.55%

Katello has multiple XSS issues in various entities

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
through 2013-05-16	affected	-

Product	Package	State	Advisory
Red Hat Satellite 6.0	katello-0:1.5.0-30.el6sat	Fixed	RHEA-2014:1175
Red Hat Subscription Asset Manager	katello	Will not fix	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2013-2101		Vendor Advisory
https://access.redhat.com/security/cve/cve-2013-2101		x_refsource_MISCExploitThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=963568		Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2101		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2073		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-2101
https://www.cve.org/CVERecord?id=CVE-2013-2101