CVE-2014-0208

3.5

LOWCVSS v2

Published

October 16, 2017

Affected

6 projects

Assigned by

Red Hat

Severity scale

010

Description

Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name.

foreman

NPMNode Implementation of Foreman

<= 1.4.3NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

<= 1.4.3NVD

foreman

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python library to manipulate The Foreman through the API

<= 1.4.3NVD

foreman

Crates.ioToolchain manager for simple binary tools

<= 1.4.3NVD

foreman

RubyGemsProcess manager for applications with multiple components

<= 1.4.3NVD

ddollar/foreman

GitHubManage Procfile-based applications

<= 1.4.3NVD

Security Advisories

CVE-2014-0208

Description

More on this CVE