CVE-2016-3072

RubyGems/katello CVE-2016-3072: high 8.8, EPSS 1.84%

Katello SQL Injection vulnerabilities

Action: Upgrade katello to 2.4.3 or later.

bundle update katello

Affected

Fixed versions

Sources

• osv: GHSA-527r-mfmj-prqf
• https://nvd.nist.gov/vuln/detail/CVE-2016-3072
• https://github.com/Katello/katello/pull/6051
• https://github.com/Katello/katello/commit/5645ed4365980a34e30a9c57fe0793dff729e8e4
• https://access.redhat.com/errata/RHSA-2016:1083
• https://access.redhat.com/security/cve/CVE-2016-3072
• https://bugzilla.redhat.com/show_bug.cgi?id=1322050
• https://github.com/Katello/katello
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/katello/CVE-2016-3072.yml

CVE-2016-3072 · published 2022-05-14T01:09:00Z · modified 2023-11-08T03:58:24.953176Z · JSON