CVE-2018-1096CWE-89

CVE-2018-1096: vulnerability in Foreman

Published · Updated

Follow this CVE+ Monitor foreman

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.
Affected products
Foreman Project · Foreman
Related CVEs — Foreman

In the same product, most dangerous first.

CVE-2017-15100—CVE-2017-15100EPSS 1.1%