CVE-2015-5282

Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.

Score

CVSS 3.0 6.1 Medium

Status

Modified - secalert@redhat.com

Published

2017-09-25

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Foreman (Theforeman)

References

• http://projects.theforeman.org/issues/11859
• http://www.openwall.com/lists/oss-security/2015/09/21/3
• https://bugzilla.redhat.com/show_bug.cgi?id=1264221
• https://github.com/theforeman/foreman/commit/4f3555b217be8723e8045f9816d147b5f684ec57
• https://theforeman.org/security.html#2015-5282