6.1med
CVE-2016-8639
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
6.1
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 67%
Public exploits
0
none known
Summary
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
Exploit prediction (EPSS)
1.16% probability of exploitation in the next 30 days, higher than 67% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 6.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| CNA | 3.0 | 6.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| NVD | 3.0 | 5.4 | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| NVD | 2.0 | 3.5 | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Affected products
- The Foreman Project foreman
Classification
- Weakness
- CWE-79 Improper Neutralization of Input During Web Page Generation
References
- bugzilla.redhat.com /show_bug.cgi?id=CVE-2016-8639 · x_refsource_CONFIRM, x_transferred
- access.redhat.com /errata/RHSA-2018:0336 · vendor-advisory, x_refsource_REDHAT, x_transferred
- github.com /theforeman/foreman/pull/3523 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/94263 · vdb-entry, x_refsource_BID, x_transferred
- projects.theforeman.org /issues/15037 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-8639
- NVD: CVE-2016-8639
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.