SUSE Manager 5.0 and 4.3 Basic Cross-Site Scripting Vulnerability in Spacewalk Java

A reflected cross-site scripting vulnerability has been identified in the Spacewalk Java component of SUSE Manager 5.0 and 4.3. This issue allows the execution of arbitrary JavaScript on the affected system. The vulnerability is present in SUSE Manager 5.0 through 5.0.24-150600.3.25.1 and SUSE Manager Server Module 4.3 prior to 4.3.85-150400.3.105.3.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute malicious JavaScript in the context of the user's browser.

Remediation

Users can upgrade to SUSE Manager 5.0.4 or SUSE Manager Server Module 4.3.15.1 to address this vulnerability.