CVE-2013-0171

Foreman before 1.1 allows remote attackers to execute arbitrary code via a crafted YAML object to the (1) fact or (2) report import API.

Score

CVSS 2.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2014-05-08

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Foreman (Theforeman)

References

• http://projects.theforeman.org/issues/2069
• http://theforeman.org/security.html