Medium severity · published Dec 7, 2018
CVE-2018-16861
A cross-site scripting (XSS) flaw was found in the foreman component of satellite
4.8
CVSS
0.9%
EPSS
No
On KEV
Description
A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FO
Foreman · Theforeman
before 1.18.3; 1.19.0 before 1.19.1; 1.20.0; 1.20.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-16861
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-16861
access.redhat.com
https://access.redhat.com/errata/RHSA-2019:1222
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16861
More from Foreman
9.8
CVE-2018-14643
An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman
9.1
CVE-2026-96659
Foreman: excessive permissions for viewer role on preview
9.1
CVE-2022-3874
A command injection flaw was found in foreman
9.1
CVE-2023-0462
An arbitrary code execution flaw was found in Foreman
9.1
CVE-2023-0118
An arbitrary code execution flaw was found in Foreman