Skip to content
OpenAdvisories

Product · The Foreman Project

katello

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2018-14623

    katello SQL Injection vulnerability

    A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2…

    The Foreman Project katello katello RubyGems