5.4
Moyenne
CVE-2023-0119 A stored Cross-site scripting vulnerability was found in foreman
Description
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Satellite 6.13 for RHEL 8 | Versions non publiées | |
| Red Hat Satellite 6.14 for RHEL 8 | Versions non publiées |
Autres CVE de Red Hat Satellite 6.13 for RHEL 8
Les 6 CVE de Red Hat Satellite 6.13 for RHEL 8 →
CVE-2024-8553
A vulnerability was found in Foreman's loader macros introduced with report templates
6.3
Moyenne
CVE-2024-7923
An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to…
9.8
Critique
CVE-2024-7012
An authentication bypass vulnerability has been identified in Foreman when deployed with External Authentication, due to…
9.8
Critique
CVE-2023-4886
A sensitive information exposure vulnerability was found in foreman
6.7
Moyenne