Beveiligingsadvies
CVE-2017-7535
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action.