← All advisories

Moderate severity4.3NVD Advisory· Published Jun 17, 2026

katello: missing repository authorization in content_uploads exposes cross-product content existence

CVE-2026-12515

Description

katello: missing repository authorization in content_uploads exposes cross-product content existence

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
katelloRubyGems	< 4.21.0.rc1	4.21.0.rc1

Affected products

1

Theforeman/Katellollm-create

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-c43c-rf7g-5xpgghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-12515ghsaADVISORY
access.redhat.com/security/cve/CVE-2026-12515ghsaWEB
bugzilla.redhat.com/show_bug.cgighsaWEB
github.com/Katello/katello/pull/11712ghsaWEB

News mentions

0

No linked articles in our index yet.