Security Advisory

CVE-2013-4386

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-11-19 19:00:00
Last updated 2024-08-06 16:45:14
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.