Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-6319

Опубликовано: 19 авг. 2016
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*
Версия до 1.12.1 (включая)

EPSS

Процентиль: 72%
0.00734
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

redhat логотип

CVE-2016-6319

CVSS3: 6.1
redhat
больше 9 лет назад

Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.

debian логотип

CVE-2016-6319

CVSS3: 6.1
debian
больше 9 лет назад

Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb ...

github логотип

GHSA-63pc-xj3r-v6f8

CVSS3: 6.1
github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.

EPSS

Процентиль: 72%
0.00734
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79