CVE-2013-2101

Katello has multiple XSS issues in various entities

• CWE-79

• https://access.redhat.com/security/cve/cve-2013-2101Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2101Exploit, Issue Tracking, Third Party Advisory
• https://access.redhat.com/security/cve/cve-2013-2101Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2101Exploit, Issue Tracking, Third Party Advisory

Published

Dec 3, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2095rubygem-openshift-origin-controller: API can be used to crea…9.8
• CVE-2013-2096OpenStack Compute (Nova) Folsom, Grizzly, and Havana does no…
• CVE-2013-2097ZPanel through 10.1.0 has Remote Command Execution7.8
• CVE-2013-2098Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-2099Algorithmic complexity vulnerability in the ssl.match_hostna…
• CVE-2013-2100The urlopen function in pym/portage/util/_urlopen.py in Gent…
• CVE-2013-2102The default configuration of Red Hat JBoss Portal before 6.1…
• CVE-2013-2103OpenShift cartridge allows remote URL retrieval8.1
• CVE-2013-2104python-keystoneclient before 0.2.4, as used in OpenStack Key…
• CVE-2013-2105The Show In Browser (show_in_browser) gem 0.0.3 for Ruby all…
• CVE-2013-2106webauth before 4.6.1 has authentication credential disclosur…7.5
• CVE-2013-2107Cross-site request forgery (CSRF) vulnerability in the Mail …