CVE-2017-7535
foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organi…
Published: 2018-07-26 · CVSS: 6.1 · CVSS 3.0
foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7