CVE-2014-3492

4.3

MEDIUMCVSS v2

Published

July 1, 2014

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Multiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5 and 1.5.x before 1.5.1 allow remote attackers to inject arbitrary web script or HTML via a parameter (1) name or (2) value related to the host.

foreman

NPMNode Implementation of Foreman

= 1.4.1, = 1.4.3, = 1.4.2, = 1.5.0, <= 1.4.4, = 1.4.0NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

= 1.4.1, = 1.4.3, = 1.4.2, = 1.5.0, <= 1.4.4, = 1.4.0NVD

foreman

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Process manager for applications with multiple components

= 1.4.1, = 1.4.3, = 1.4.2, = 1.5.0, <= 1.4.4, = 1.4.0NVD

ddollar/foreman

GitHubManage Procfile-based applications

= 1.4.1, = 1.4.3, = 1.4.2, = 1.5.0, <= 1.4.4, = 1.4.0NVD

Security Advisories

CVE-2014-3492

Description

More on this CVE