Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:18966
HistoryMay 16, 2019 - 2:19 a.m.

Cross-Site Scripting (XSS)

2019-05-1602:19:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.002

Percentile

53.0%

Foreman is vulnerable to cross-site scripting (XSS) attacks. A remote attacker could exploit a flaw in the web interface component. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.

References

EPSS

0.002

Percentile

53.0%