Medium severity5.4NVD Advisory· Published Sep 6, 2017· Updated Jun 17, 2026

CVE-2015-3162

Description

Cross-site scripting (XSS) vulnerability in the edit comment dialog in bkr/server/widgets.py in Beaker 20.1 allows remote authenticated users to inject arbitrary web script or HTML via writing a crafted comment on an acked or nacked canceled job.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Beaker/Beaker2 versions
cpe:2.3:a:beaker-project:beaker:20.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:beaker-project:beaker:20.1:*:*:*:*:*:*:*
- (no CPE)range: = 20.1

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2015/05/08/1nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/74568nvdThird Party AdvisoryVDB Entry
beaker-project.org/docs/whats-new/release-20.htmlnvdVendor Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
bugzilla.redhat.com/attachment.cginvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000