CVE-2011-2920CWE-79

Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.

Medium · published February 5, 2014

CVSS v3.1
5.5
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

A flaw was found in Spacewalk and Red Hat Network Satellite. This cross-site scripting (XSS) vulnerability allows a remote attacker to inject arbitrary web script or HTML into web pages through various input fields, such as the "Filter by Synopsis" field. This could lead to the execution of malicious code in a user's web browser, potentially compromising user sessions or disclosing sensitive information.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.02040 · 80.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2014-02-05T18:00Z
EPSS history
Timeline
  • 05 FEB 18:00Z
    Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
    cvelistv5