katello vulnerabilities (Red Hat)
196 vulnerabilities.
katelloRed HatDeserialization of untrusted data in Jackson Databind8.1 HighkatelloRed HatDeserialization of untrusted data in Jackson Databind8.1 HighkatelloRed HatDeserialization of untrusted data in Jackson Databind8.1 HighkatelloRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 HighkatelloRed HatAbility to forge per-form CSRF tokens in Rails4.3 MediumkatelloRed HatCircumvention of file size limits in ActiveStorage7.5 HighkatelloRed HatPossible Strong Parameters Bypass in ActionPack7.5 HighkatelloRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 CriticalkatelloRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 HighkatelloRed HatImproper Input Validation in Hibernate Validator5.3 MediumkatelloRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 HighkatelloRed HatDenial of Service in Netty7.5 HighkatelloRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighkatelloRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighkatelloRed HatPossible XSS vulnerability in ActionView4.0 MediumkatelloRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 HighkatelloRed HatSQL injection in Django8.8 HighkatelloRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalkatelloRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalkatelloRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalkatelloRed HatImproper Certificate Validation in Puppet6.5 MediumkatelloRed HatThe RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for...8.8 HighkatelloRed HatDeserialization of Untrusted Data in jackson-databind9.8 CriticalkatelloRed HatHTTP Request Smuggling in Netty7.5 HighkatelloRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumkatelloRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumkatelloRed HatVersions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token...6.5 MediumkatelloRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 MediumkatelloRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 MediumkatelloRed Hatrubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable5.5 MediumkatelloRed HatForeman has improper input validation which could lead to partial Denial of Service5.3 MediumkatelloRed HatKatello has multiple XSS issues in various entities5.4 MediumkatelloRed HatKatello cleartext password storage issue4.1 MediumkatelloRed HatDouble Free in psutil7.5 HighkatelloRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 MediumkatelloRed HatApache MINA SSLFilter security Issue7.5 HighkatelloRed HatInsecure Deserialization in Apache Commons Beanutils7.3 HighkatelloRed HatIt was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce...7.4 HighkatelloRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 MediumkatelloRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 MediumkatelloRed HatTwisted CRLF Injection6.1 MediumkatelloRed HatInformation exposure in FasterXML jackson-databind7.5 HighkatelloRed HatIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 MediumkatelloRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 MediumkatelloRed HatJinja2 sandbox escape vulnerability8.6 HighkatelloRed HatJinja2 sandbox escape via string formatting8.6 HighkatelloRed Hatkatello Cross-site Scripting vulnerability5.4 MediumkatelloRed Hatkatello SQL Injection vulnerability4.3 MediumkatelloRed HatA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...7.6 HighkatelloRed HatRack vulnerable to Denial of Service7.5 High- Show moreLoading…