CVE

Id
93139  
CVE No.
CVE-2016-6319  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.  
Phase
Assigned (20160726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792859 93139 CVE-2016-6319 CONFIRM:http://projects.theforeman.org/issues/16019  View
792860 93139 CVE-2016-6319 CONFIRM:http://projects.theforeman.org/issues/16024  View
792861 93139 CVE-2016-6319 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1365815  View
792862 93139 CVE-2016-6319 CONFIRM:https://github.com/theforeman/foreman/commit/0f35fe14acf0d0d3b55e9337bc5e2b9640ff2372  View
792863 93139 CVE-2016-6319 CONFIRM:https://theforeman.org/security.html#2016-6319  View
792864 93139 CVE-2016-6319 BID:92429  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5495 JVNDB-2016-006268 phpMyAdmin におけるサービス運用妨害 (DoS) の脆弱性 phpMyAdmin は、ESRI ファイルのインポート中に一時ファイルを削除しないため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2016-6632 93139 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006268.html  View