CVE-2016-6319

foreman: Persistent XSS in Foreman remote execution plugin

Published Aug 19, 2016 CVSS 3.0 · 6.1 Medium EPSS 2.0% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-7246 Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 1:29 AM
Reserved
Jul 26, 2016, 12:00 AM
Status
Modified
Published
Aug 19, 2016, 9:59 PM
Modified
Jun 17, 2026, 12:50 AM
Severity
Moderate
Public date
Aug 9, 2016, 12:00 AM