CVE-2014-0183

Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering.

Score

CVSS 3.1 6.1 Medium

Status

Modified - secalert@redhat.com

Published

2020-01-02

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Katello (Katello)
• Subscription Asset Manager (Redhat)

References

• https://access.redhat.com/security/cve/cve-2014-0183
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0183