CVE-2016-8634
published 2018-08-01CVE-2016-8634: A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard…
PriorityP423medium5.4CVSS 3.0
AVNACLPRLUIRSCCLILAN
EPSS
1.09%
61.4th percentile
A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an organization/location with HTML in the name is created, then a user is linked directly to this URL.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| the_foreman_project | foreman | — | — |
| theforeman | foreman | — | — |
CVSS provenance
nvdv3.05.4MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fjj6-r3pr-3rrj: A vulnerability was found in foreman 1
ghsa_unreviewed·2022-05-13
CVE-2016-8634 [MEDIUM] CWE-79 GHSA-fjj6-r3pr-3rrj: A vulnerability was found in foreman 1
A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an organization/location with HTML in the name is created, then a user is linked directly to this URL.
Red Hat
foreman: Stored XSS in org/loc wizard
vendor_redhat·2016-11-03·CVSS 6.1
CVE-2016-8634 [MEDIUM] CWE-79 foreman: Stored XSS in org/loc wizard
foreman: Stored XSS in org/loc wizard
A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an organization/location with HTML in the name is created, then a user is linked directly to this URL.
Package: foreman (Red Hat Ceph Storage 1.3) - Will not fix
No detection rules found.
No public exploits indexed.
2018-08-01
Published