CVE-2023-0118: Foreman: arbitrary code execution through templates
An admin user on Foreman can bypass safe mode in templates and execute arbitrary code via the Report Templates function. When changing the "template" JSON value in the POST request, an attacker can exploit the bind() call in safemode to inject an OS command in the underlying operating system.
Other sources
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-0118?
CVE-2023-0118 is an arbitrary code execution flaw found in Foreman that allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
How severe is CVE-2023-0118?
CVE-2023-0118 has a severity rating of 9.1, which is considered critical.
Which software is affected by CVE-2023-0118?
Foreman, Redhat Satellite (version 6.13.3 and earlier) are affected by CVE-2023-0118.
How can an admin user exploit CVE-2023-0118?
An admin user can exploit CVE-2023-0118 by bypassing safe mode in templates and executing arbitrary code on the underlying operating system.
Are Redhat Enterprise Linux 8.0 systems vulnerable to CVE-2023-0118?
No, Redhat Enterprise Linux 8.0 systems are not vulnerable to CVE-2023-0118.