CVE-2017-7535

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action...

CVE-2017-7535

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action...

PT-2018-8400

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.16.0 Description The issue allows for a stored XSS in organizations/locations assignment to hosts. This can be exploited when a user assigns hosts to an organization with HTML in its name, which is visible to the us...

CVE-2017-7535: Improper Neutralization of Input During Web Page Generation

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action...