The Katello Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

The Katello Project records in CISA KEV

No The Katello Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2018-12097 CVE-2018-16887 · GHSA-mhhc-r88h-2qrm

LOW 26

A cross-site scripting (XSS) flaw was found in the katello component of Satellite.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00999 Published 2019-01-13 Fixed in 3.9.0 CWE-79

TI-2024-04484 CVE-2024-4812 · GHSA-jjqv-cfcp-2xj7

LOW 22

A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00273 Published 2024-06-05 No fix listed CWE-79