PT-2018-5039 · Foreman · Foreman

Sanket Jagtap · Published 2018-08-01 · Updated 2023-02-12 · CVE-2016-8634

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Foreman version 1.14.0

Description A stored XSS attack can occur when creating an organization or location in Foreman with a name containing HTML. This HTML is rendered in the alertbox on the page, specifically in the second step of the wizard at the "/organizations/id/step2" API endpoint. If a user is linked directly to this URL after an organization or location with HTML in its name is created, the stored XSS attack is triggered.

Recommendations For Foreman version 1.14.0, as a temporary workaround, consider validating and sanitizing user input for organization and location names to prevent the inclusion of HTML. Restrict access to the "/organizations/id/step2" API endpoint until a patch is available.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-8634

RHSA-2018:0336

Affected Products

Foreman

References · 5

• https://osv.dev/vulnerability/CVE-2016-8634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8634 · Security Note
• https://projects.theforeman.org/issues/17195 · Vendor Advisory
• http://securityfocus.com/bid/94206 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8634 · Note