CveMateVulnerability intelligence

Theforeman Foreman vulnerabilities, page 3

84 vulnerabilities

Known vulnerabilities in Theforeman Foreman, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2016-8634the foreman projectforeman+18y ago01-08-2018 12:00

A vulnerability was found in foreman 1.14.0. When creating an organization or location in Foreman, if the name contains HTML then the second step of the wizard (/organizations/id/step2) will render the HTML. This occurs in the alertbox on the page. The result is a stored XSS attack if an organization/location with HTML in the name is created, then a user is linked directly to this URL.CVE-2016-3728theforemanforeman10y ago20-05-2016 14:00

Eval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman before 1.10.4 and 1.11.x before 1.11.2 allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH_INFO to tftp/.CVE-2025-9572ubunturuby-foreman+267mo ago27-02-2026 07:28

n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.CVE-2020-10710redhatansiblerole-satellite-receptor-installer+434y ago16-08-2022 00:00

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password.CVE-2014-0091foremanforeman+16y ago11-12-2019 14:11

Foreman has improper input validation which could lead to partial Denial of Service CVE-2014-0192theforemanforeman12y ago08-05-2014 14:00

Foreman 1.4.0 before 1.5.0 does not properly restrict access to provisioning template previews, which allows remote attackers to obtain sensitive information via the hostname parameter, related to "spoof."CVE-2014-0007redhatforeman-proxy+212y ago20-06-2014 14:00

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.CVE-2014-0089theforemanforeman12y ago27-03-2014 16:00

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.CVE-2014-0090theforemanforeman12y ago08-05-2014 14:00

Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.CVE-2014-0208theforemanforeman9y ago16-10-2017 18:00

Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name.CVE-2014-4507theforemanforeman12y ago20-06-2014 14:00

Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst parameter to tftp/fetch_boot_file.CVE-2014-8183redhatsatellite+17y ago01-08-2019 13:38

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations.CVE-2014-3691redhatopenstack+3511y ago09-03-2015 14:00

Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass intended authentication and execute arbitrary API requests via a request without a certificate.CVE-2014-3492theforemanforeman12y ago01-07-2014 16:00

Multiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5 and 1.5.x before 1.5.1 allow remote attackers to inject arbitrary web script or HTML via a parameter (1) name or (2) value related to the host.CVE-2014-3491theforemanforeman12y ago01-07-2014 16:00

Cross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes.CVE-2014-3531theforemanforeman9y ago18-10-2017 14:00

Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) description.CVE-2014-3653theforemanforeman11y ago06-07-2015 14:55

Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via a crafted provisioning template.CVE-2022-3874RubyGemsforeman+23y ago22-09-2023 13:56

A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.CVE-2012-5477theforemanforeman12y ago08-05-2014 14:00

The smart proxy in Foreman before 1.1 uses a umask set to 0, which allows local users to modify files created by the daemon via unspecified vectors.CVE-2012-5648theforemanforeman12y ago04-04-2014 14:00

Multiple SQL injection vulnerabilities in Foreman before 1.0.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) app/models/hostext/search.rb or (2) app/models/puppetclass.rb, related to the search mechanism.