CVE-2016-8613

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-8613
A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in the web UI does not escape the output causing any HTML or JavaScript to run in the user's browser. The output of the job is stored, making this a stored XSS vulnerability.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://www.securityfocus.com/bid/93859 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8613 Issue Tracking Patch Third Party Advisory
https://github.com/theforeman/foreman_remote_execution/pull/208 Third Party Advisory
https://projects.theforeman.org/issues/17066/ Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:theforeman:foreman:1.5.1:*:*:*:*:*:*:*
History

12 Feb 2023, 23:26

Type Values Removed Values Added
Summary CVE-2016-8613 foreman: Stored XSS vulnerability in remote execution plugin A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in the web UI does not escape the output causing any HTML or JavaScript to run in the user's browser. The output of the job is stored, making this a stored XSS vulnerability.
References
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1387232', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=1387232', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2018:0336', 'name': 'https://access.redhat.com/errata/RHSA-2018:0336', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/security/cve/CVE-2016-8613', 'name': 'https://access.redhat.com/security/cve/CVE-2016-8613', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 15:17

Type Values Removed Values Added
References
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1387232 -
  • (MISC) https://access.redhat.com/errata/RHSA-2018:0336 -
  • (MISC) https://access.redhat.com/security/cve/CVE-2016-8613 -
Summary A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in the web UI does not escape the output causing any HTML or JavaScript to run in the user's browser. The output of the job is stored, making this a stored XSS vulnerability. CVE-2016-8613 foreman: Stored XSS vulnerability in remote execution plugin
Information

Published : 2018-07-31 20:29

Updated : 2023-12-10 12:44

NVD link : CVE-2016-8613

Mitre link : CVE-2016-8613

CVE.ORG link : CVE-2016-8613

JSON object : View

Products Affected

theforeman

  • foreman
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')