CVE-2013-4386

7.5

HIGHCVSS v2

Published

November 20, 2013

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.

foreman

NPMNode Implementation of Foreman

= 1.2.1, = 1.2.0, <= 1.2.2NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

= 1.2.1, = 1.2.0, <= 1.2.2NVD

foreman

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Process manager for applications with multiple components

= 1.2.1, = 1.2.0, <= 1.2.2NVD

ddollar/foreman

GitHubManage Procfile-based applications

= 1.2.1, = 1.2.0, <= 1.2.2NVD

Security Advisories

CVE-2013-4386

Description

More on this CVE