Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0119

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

Published

2023-09-12T16:15:08.007

Last Modified

2024-11-21T07:36:35.410

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses

Type: Secondary
CWE-79
Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	redhat	satellite	6.13	Yes
Operating System	redhat	enterprise_linux	8.0	No

References

https://access.redhat.com/errata/RHSA-2023:3387 Vendor Advisory ([email protected])
https://access.redhat.com/errata/RHSA-2023:6818 ([email protected])
https://access.redhat.com/security/cve/CVE-2023-0119 Vendor Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2159104 Issue Tracking, Vendor Advisory ([email protected])
https://projects.theforeman.org/issues/35977 ([email protected])
https://access.redhat.com/errata/RHSA-2023:3387 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2023:6818 (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/security/cve/CVE-2023-0119 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2159104 Issue Tracking, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://projects.theforeman.org/issues/35977 (af854a3a-2127-422b-91ae-364da2661108)