Medium severity · published Jul 31, 2018
CVE-2016-8613
A flaw was found in foreman 1.5.1
6.1
CVSS
2.4%
EPSS
No
On KEV
Description
A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in the web UI does not escape the output causing any HTML or JavaScript to run in the user's browser. The output of the job is stored, making this a stored XSS vulnerability.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
foreman · The Foreman Project
1.5.1 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-8613
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-8613
Third Party Advisory
http://www.securityfocus.com/bid/93859
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8613
Third Party Advisory
https://github.com/theforeman/foreman_remote_execution/pull/208
Vendor Advisory
https://projects.theforeman.org/issues/17066/
More from foreman
5.4
CVE-2016-8639
It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name
5.4
CVE-2016-8634
A vulnerability was found in foreman 1.14.0