PT-2026-103917

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch log task. The request id parameter is passed to an underlying system command typically grep without adequate shell neutralization. While the task is intended to fetch specific log entries, an...