Medium
5.4
Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form
CVE-2011-3344
First seen on SecPulse
Summary
A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.
References
- patch redhat.com
- patch bugzilla.redhat.com
- patch redhat.com
- web secalert@redhat.com
- web secalert@redhat.com
- web git.fedorahosted.org