title: Red Hat Security Advisory: Satellite 6.5 Release
description: RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack pulp: Improper path parsing leads to overwriting of iso repositories foreman: Persisted XSS on all pages that use breadcrumbs foreman: stored XSS in success notification after entity creation katello: stored XSS in subscriptions and repositories pages candlepin: credentials exposure through log files
cpes: cpe:/a:redhat:satellite:6.5::el7 cpe:/a:redhat:satellite_capsule:6.5::el7