5.4
Medium
CVE-2023-0119 A stored Cross-site scripting vulnerability was found in foreman
Description
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Satellite 6.13 for RHEL 8 | Versions not published | |
| Red Hat Satellite 6.14 for RHEL 8 | Versions not published |
Other CVEs of Red Hat Satellite 6.13 for RHEL 8
The 6 CVEs of Red Hat Satellite 6.13 for RHEL 8 →
CVE-2024-8553
A vulnerability was found in Foreman's loader macros introduced with report templates
6.3
Medium
CVE-2024-7923
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to…
9.8
Critical
CVE-2024-7012
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to…
9.8
Critical
CVE-2023-4886
A sensitive information exposure vulnerability was found in foreman
6.7
Medium