CVE-2022-4130: Red Hat Satellite

Medium severity, CVSS 4.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

Affected products

• Red Hat Satellite: version 6.9 only; version 6.10 only; version 6.11 only

Published 2022-12-16. Last modified 2026-06-17.