Theforeman : Security Vulnerabilities, CVEs, Published In 2015 (XSS)
Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via (1) global parameters, (2) smart class parameters, or (3) smart variables in the (a) host or (b) hostgroup edit forms.
Max CVSS
4.3
EPSS Score
0.22%
Published
2015-12-17
Updated
2023-02-12
Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.
Max CVSS
4.3
EPSS Score
0.25%
Published
2015-07-06
Updated
2015-07-08
2 vulnerabilities found