A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user. This code can be executed when opening certain pages, for example, Host Collections.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2024-06-05T15:06:13.886Z
Updated: 2024-08-04T16:39:16.461Z
Reserved: 2024-05-13T04:07:48.423Z
Link: CVE-2024-4812
Vulnrichment
Updated: 2024-08-01T20:55:10.126Z
NVD
Status : Modified
Published: 2024-06-05T15:15:12.333
Modified: 2024-11-21T09:43:40.183
Link: CVE-2024-4812
Redhat