Security Advisory

CVE-2016-8639

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-01 13:00:00
Last updated 2024-08-06 02:27:41
Assigner redhat
CVSS score 6.1
State PUBLISHED

Description

It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.