Foreman cross-site scripting vulnerability (CNVD-2015-08438)

Foreman is a set of lifecycle management tools for use in physical and virtual servers. A cross-site scripting vulnerability exists in the Foreman information pop-up box, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain...