CVE-2014-3491

Cross-site scripting XSS vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes...

CVE-2014-3491: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes...

PT-2014-5357

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.4.5 Foreman versions 1.5.x prior to 1.5.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page. This is related t...