CVE-2018-16861highCWE-79

CVE-2018-16861: falha de alta gravidade em The Foreman Project foreman

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar foreman

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.6epss 0.9%
A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Produtos afetados
The Foreman Project · foreman
CVEs relacionadas — The Foreman Project foreman

No mesmo produto, das mais perigosas para as menos.

CVE-2016-8613MEDIUMCVE-2016-8613EPSS 2.4%CVE-2019-3893MEDIUMCVE-2019-3893EPSS 1.8%CVE-2016-8639MEDIUMCVE-2016-8639EPSS 1.2%CVE-2016-8634MEDIUMCVE-2016-8634EPSS 1.1%