CVE-2018-14664

Published: 2018-10-12T22:15Z

Last Modified: 2024-11-21T03:49Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability exists due to an improperly escaped HTML code in the breadcrumbs bar. This allows a user with permissions to edit which attribute is used in the breadcrumbs bar to store code that will be executed on the client side. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt