Foreman cross-site scripting vulnerability (CNVD-2017-32872)

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A cross-site scripting vulnerability exists in versions of Foreman prior to 1.5.2. A remote attacker can...