Логотип exploitDog
bind:CVE-2023-0119
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-0119

Количество 4

Количество 4

redhat логотип

CVE-2023-0119

почти 3 года назад

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2023-0119

больше 2 лет назад

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2023-0119

больше 2 лет назад

A stored Cross-site scripting vulnerability was found in foreman. The ...

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-6fr9-c775-x826

больше 2 лет назад

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2023-0119

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

CVSS3: 5.4
0%
Низкий
почти 3 года назад
nvd логотип
CVE-2023-0119

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

CVSS3: 5.4
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-0119

A stored Cross-site scripting vulnerability was found in foreman. The ...

CVSS3: 5.4
0%
Низкий
больше 2 лет назад
github логотип
GHSA-6fr9-c775-x826

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

CVSS3: 5.4
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу