Name: CVE-2023-0118: Improper Neutralization of Special Elements used in an OS Command
Creator: Rapid7
Published: 2023-09-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-0118, CWE-78, CVSS 9.1, EPSS 0.01382

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.

CVSS Details

CVSS 3.1 Base Score: 9.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade satellite-brandingUpgrade foreman-cliUpgrade satelliteUpgrade satellite-cli	Aug 4, 2023	Aug 3, 2023
Redhat_linux	—	Upgrade rubygem-unicode-debugsourceUpgrade satellite-cloneUpgrade satellite-cliUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-powerbarUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_extUpgrade rubygem-unicodeUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cliUpgrade rubygem-localeUpgrade rubygem-multi_jsonUpgrade rubygem-domain_nameUpgrade rubygem-unfUpgrade rubygem-ffiUpgrade rubygem-oauthUpgrade python39-pulp_manifestUpgrade rubygem-mime-typesUpgrade rubygem-gssapiUpgrade rubygem-amazing_printUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-oauth-ttyUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-snaky_hashUpgrade rubygem-version_gemUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hashieUpgrade rubygem-http-acceptUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade rubygem-unicode-display_widthUpgrade satellite-maintainUpgrade foreman-cliUpgrade rubygem-highlineUpgrade satelliteUpgrade rubygem-jwtUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_tasks	Aug 4, 2023	Aug 3, 2023
Rocky_linux	—	Upgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfo	Mar 5, 2024	Sep 20, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence