CVE-2014-3653

4.3

MEDIUMCVSS v2

Published

July 6, 2015

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.

foreman

NPMNode Implementation of Foreman

<= 1.6.0NVD

theforeman/foreman

GitHuban application that automates the lifecycle of servers

<= 1.6.0NVD

foreman

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Process manager for applications with multiple components

<= 1.6.0NVD

ddollar/foreman

GitHubManage Procfile-based applications

<= 1.6.0NVD

Security Advisories

CVE-2014-3653

Description

More on this CVE