Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-5282

Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.

Published

2017-09-25T17:29:00.447

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	theforeman	foreman	1.7.0	Yes
Application	theforeman	foreman	1.7.1	Yes
Application	theforeman	foreman	1.7.2	Yes
Application	theforeman	foreman	1.7.3	Yes
Application	theforeman	foreman	1.7.4	Yes
Application	theforeman	foreman	1.7.5	Yes
Application	theforeman	foreman	1.8.0	Yes
Application	theforeman	foreman	1.8.1	Yes
Application	theforeman	foreman	1.8.2	Yes
Application	theforeman	foreman	1.8.3	Yes
Application	theforeman	foreman	1.8.4	Yes
Application	theforeman	foreman	1.9.0	Yes
Application	theforeman	foreman	1.9.1	Yes
Application	theforeman	foreman	1.9.2	Yes
Application	theforeman	foreman	1.9.3	Yes
Application	theforeman	foreman	1.10.0	Yes
Application	theforeman	foreman	1.10.1	Yes
Application	theforeman	foreman	1.10.2	Yes
Application	theforeman	foreman	1.10.3	Yes
Application	theforeman	foreman	1.10.4	Yes
Application	theforeman	foreman	1.11.0	Yes
Application	theforeman	foreman	1.11.1	Yes
Application	theforeman	foreman	1.11.2	Yes
Application	theforeman	foreman	1.11.3	Yes
Application	theforeman	foreman	1.11.4	Yes
Application	theforeman	foreman	1.12.0	Yes
Application	theforeman	foreman	1.12.1	Yes
Application	theforeman	foreman	1.12.2	Yes
Application	theforeman	foreman	1.12.3	Yes
Application	theforeman	foreman	1.12.4	Yes
Application	theforeman	foreman	1.13.0	Yes
Application	theforeman	foreman	1.13.1	Yes
Application	theforeman	foreman	1.13.2	Yes
Application	theforeman	foreman	1.13.3	Yes
Application	theforeman	foreman	1.13.4	Yes
Application	theforeman	foreman	1.14.0	Yes
Application	theforeman	foreman	1.14.1	Yes
Application	theforeman	foreman	1.14.2	Yes
Application	theforeman	foreman	1.14.3	Yes
Application	theforeman	foreman	1.15.0	Yes
Application	theforeman	foreman	1.15.1	Yes
Application	theforeman	foreman	1.15.2	Yes
Application	theforeman	foreman	1.15.3	Yes
Application	theforeman	foreman	1.15.4	Yes
Application	theforeman	foreman	1.16.0	Yes

References

http://projects.theforeman.org/issues/11859 Issue Tracking, Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2015/09/21/3 Mailing List, Patch, Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=1264221 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://github.com/theforeman/foreman/commit/4f3555b217be8723e8045f9816d147b5f684ec57 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://theforeman.org/security.html#2015-5282 Patch, Vendor Advisory ([email protected])
http://projects.theforeman.org/issues/11859 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2015/09/21/3 Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=1264221 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/theforeman/foreman/commit/4f3555b217be8723e8045f9816d147b5f684ec57 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://theforeman.org/security.html#2015-5282 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)