CVE-2023-0119 — Foreman: stored cross-site scripting in host tab
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an …
Published: 2023-09-12 · CVSS: 5.4 · CVSS 3.1
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7