spacewalk-proxy (SUSE:Manager Proxy Module 4.3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Proxy Module 4.3 package spacewalk-proxy, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2024-47533 — CVSS 9.8 (critical): Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication…
• CVE-2023-22644 — CVSS 5.5 (medium): A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector…
• CVE-2024-49502 — CVSS 3.5 (low): A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup Wizard, HTTP Proxy…
• CVE-2024-49503 — CVSS 3.5 (low): A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE manager allows…