REDHAT-BUG-1071741: XSS
Jeremy Choi and Keqin Hong of the Red Hat HSS Pen-Test Team reported a stored XSS issue in foreman. Authenticated users who are able to add bookmarks may inject malicious javascript or html that will be executed by other users viewing the page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1071741?
The severity of REDHAT-BUG-1071741 is considered high due to the potential for stored XSS attacks.
How do I fix REDHAT-BUG-1071741?
To fix REDHAT-BUG-1071741, it is recommended to update to the latest patched version of Red Hat Foreman.
Who is affected by REDHAT-BUG-1071741?
Authenticated users of Red Hat Foreman who can add bookmarks are affected by REDHAT-BUG-1071741.
What is the impact of REDHAT-BUG-1071741?
The impact of REDHAT-BUG-1071741 allows malicious users to execute harmful scripts on the browsers of other users viewing the page.
Which versions of Foreman are vulnerable to REDHAT-BUG-1071741?
All versions of Red Hat Foreman that allow users to add bookmarks are vulnerable to REDHAT-BUG-1071741.