Back

MEDIUM

foreman: XSS in hidden parameter value switcher

Published Sep 25, 2017

Description

Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.

Affected products

Remediation

Red Hat statement

This issue affects the versions of foreman as shipped with Red Hat Satellite 6. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Metrics

References (8)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Sep 25, 2017
Updated Aug 6, 2024
Reserved Jul 1, 2015
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Sep 17, 2015