Description (CNA)
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Foreman Project / Foreman | affected before 1.16.1 |
CWE
CWE-89
References
- https://access.redhat.com/errata/RHSA-2018:2927
- https://bugzilla.redhat.com/show_bug.cgi?id=1561061
- http://projects.theforeman.org/issues/23028
ADP enrichment
No English description supplied.