The Katello Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

The Katello Project records in CISA KEV

No The Katello Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Katello · all components

TI-2024-04484 CVE-2024-4812 · GHSA-jjqv-cfcp-2xj7

LOW 22

A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00273 Published 2024-06-05 No fix listed CWE-79