Medium severity5.4NVD Advisory· Published Aug 19, 2016· Updated May 6, 2026
CVE-2016-6320
CVE-2016-6320
Description
Cross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- github.com/theforeman/foreman/pull/3714/commits/850c38451c7bbde75521b796d16aca26e4d240a0nvdPatch
- theforeman.org/security.htmlnvdPatchVendor Advisory
- projects.theforeman.org/issues/16022nvdVendor Advisory
- www.securityfocus.com/bid/92431nvdThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- access.redhat.com/errata/RHBA-2016:1885nvd
News mentions
0No linked articles in our index yet.