A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hashieUpgrade rubygem-http-acceptUpgrade rubygem-clampUpgrade rubygem-jwtUpgrade foreman-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-loggingUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-snaky_hashUpgrade rubygem-highlineUpgrade rubygem-unicode-display_widthUpgrade rubygem-version_gemUpgrade rubygem-netrcUpgrade satelliteUpgrade satellite-brandingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cliUpgrade rubygem-oauthUpgrade rubygem-powerbarUpgrade rubygem-unicode-debuginfoUpgrade rubygem-foreman_maintainUpgrade rubygem-unf_extUpgrade rubygem-oauth-ttyUpgrade rubygem-unfUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-little-pluggerUpgrade rubygem-amazing_printUpgrade rubygem-localeUpgrade rubygem-mime-typesUpgrade rubygem-ffi-debuginfoUpgrade python39-pulp_manifestUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade satellite-cloneUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-apipie-bindingsUpgrade rubygem-gssapiUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-ffiUpgrade rubygem-fast_gettextUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_bootdisk | Jun 1, 2023 | May 31, 2023 |
| Redhat_linux | — | Upgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-domain_nameUpgrade rubygem-unicode-display_widthUpgrade rubygem-little-pluggerUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-foreman_maintainUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade rubygem-powerbarUpgrade rubygem-oauth-ttyUpgrade satellite-cliUpgrade rubygem-oauthUpgrade rubygem-clampUpgrade rubygem-hashieUpgrade rubygem-mime-types-dataUpgrade satellite-brandingUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-snaky_hashUpgrade rubygem-http-acceptUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-mime-typesUpgrade rubygem-localeUpgrade rubygem-loggingUpgrade rubygem-version_gemUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade python39-pulp_manifestUpgrade rubygem-http-cookieUpgrade rubygem-jwtUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffiUpgrade satelliteUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-amazing_printUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-rest-clientUpgrade rubygem-unf | Jun 1, 2023 | May 31, 2023 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfo | Mar 5, 2024 | Sep 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub