CVE-2023-0118 Foreman: arbitrary code execution through templates

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...

CVE-2023-0118 Foreman: arbitrary code execution through templates

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...

PT-2023-16025 · Foreman +1 · Foreman +1

Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: An arbitrary code execution flaw was found in Foreman, allowing an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system. Recommendations...

CVE-2023-0119

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...

CVE-2023-0119

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...

CVE-2023-0119

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...

Cross site scripting

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...

CVE-2023-0119

CVE-2023-0119 is a stored cross-site scripting vulnerability affecting Foreman as used in Red Hat Satellite. The issue arises from incorrect filtering of input data in the Hosts tab comment section, enabling an attacker with an existing account to steal another user’s session, perform actions on ...

CVE-2023-0119 Foreman: stored cross-site scripting in host tab

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...

CVE-2023-0119 Foreman: stored cross-site scripting in host tab

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...

PT-2023-16026 · Foreman +1 · Foreman +1

Name of the Vulnerable Software and Affected Versions: foreman affected versions not specified Description: A stored Cross-site scripting vulnerability was found in the Comment section of the Hosts tab, due to incorrect filtering of user input data. This allows an attacker with an existing accoun...

PT-2023-5419

Name of the Vulnerable Software and Affected Versions foreman affected versions not specified Description A command injection flaw was found in foreman, allowing an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configuratio...

Foreman: Arbitrary code execution through templates

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...

Foreman: Stored cross-site scripting in host tab

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...

CVE-2022-3874

A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating...

Red Hat Satellite 操作系统命令注入漏洞

Red Hat Satellite is a system management platform from Red Hat. The platform can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. A security vulnerability exists in Red Hat Satellite, which originates in the...

The vulnerability of the YAML.load() function in the YAML syntax analyzer library for the Foreman server management, configuration, and monitoring application, as well as for the Red Hat Satellite system management tool, allows a malicious actor to execute arbitrary code.

The vulnerability of the YAML.load function in the YAML syntax analyzer library for the Foreman server management, configuration, and monitoring application, as well as for the Red Hat Satellite system management tool, is related to improper code generation. Exploiting this vulnerability allows a...

PT-2023-1956 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: An arbitrary code execution flaw was found in Foreman, related to incorrect handling of code generation in the YAML.load function of the YAML parser library. This issue may allow an admin...

CVE-2023-0119

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, a...

CVE-2023-0118

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system...