Unrated severityNVD Advisory· Published Aug 1, 2018· Updated Aug 6, 2024
CVE-2016-8639
CVE-2016-8639
Description
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to display arbitrary HTML including scripting code within the web interface.
Affected products
1- Range: 1.13.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- access.redhat.com/errata/RHSA-2018:0336mitrevendor-advisoryx_refsource_REDHAT
- www.securityfocus.com/bid/94263mitrevdb-entryx_refsource_BID
- bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM
- github.com/theforeman/foreman/pull/3523mitrex_refsource_CONFIRM
- projects.theforeman.org/issues/15037mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.