CVE-2024-4812: Katello Project Katello

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user. This code can be executed when opening certain pages, for example, Host Collections.

Affected products

• Katello Project Katello: affected versions not specified
• Red Hat Satellite: version 6.0 only

Published 2024-06-05. Last modified 2026-06-17.