PT-2018-5039 · Foreman · Foreman

Sanket Jagtap · Publicado 2018-08-01 · Atualizado 2023-02-12 · CVE-2016-8634

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Foreman version 1.14.0

Description A stored XSS attack can occur when creating an organization or location in Foreman with a name containing HTML. This HTML is rendered in the alertbox on the page, specifically in the second step of the wizard at the "/organizations/id/step2" API endpoint. If a user is linked directly to this URL after an organization or location with HTML in its name is created, the stored XSS attack is triggered.

Recommendations For Foreman version 1.14.0, as a temporary workaround, consider validating and sanitizing user input for organization and location names to prevent the inclusion of HTML. Restrict access to the "/organizations/id/step2" API endpoint until a patch is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-8634

RHSA-2018:0336

Produtos afetados

Foreman

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-8634 · Aviso do Fabricante
• http://securityfocus.com/bid/94206 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8634 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8634 · Nota
• https://projects.theforeman.org/issues/17195 · Aviso do Fabricante