Cross site scripting

2017-09-2517:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.

CPENameOperatorVersion
foremaneq1.8.4
foremaneq1.14.2
foremaneq1.13.3
foremaneq1.12.0
foremaneq1.12.3
foremaneq1.11.3
foremaneq1.13.4
foremaneq1.10.3
foremaneq1.9.0
foremaneq1.9.1

Name	Operator	Version
foreman	eq	1.8.4
foreman	eq	1.14.2
foreman	eq	1.13.3
foreman	eq	1.12.0
foreman	eq	1.12.3
foreman	eq	1.11.3
foreman	eq	1.13.4
foreman	eq	1.10.3
foreman	eq	1.9.0
foreman	eq	1.9.1

Rows per page:

1-10 of 451

References

projects.theforeman.org/issues/11859

www.openwall.com/lists/oss-security/2015/09/21/3

bugzilla.redhat.com/show_bug.cgi?id=1264221

github.com/theforeman/foreman/commit/4f3555b217be8723e8045f9816d147b5f684ec57

theforeman.org/security.html