Beveiligingsadvies

CVE-2016-8613

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-07-31 20:00:00

Laatst bijgewerkt 2024-08-06 02:27:40

Toegewezen door redhat

CVSS-score 6.4

Status PUBLISHED

Beschrijving

A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in the web UI does not escape the output causing any HTML or JavaScript to run in the user's browser. The output of the job is stored, making this a stored XSS vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗