Test ID:	1.3.6.1.4.1.25623.1.0.106416
Category:	Web application abuses
Title:	Foreman 1.11.x < 1.13.0 XSS Vulnerability
Summary:	Foreman is prone to a cross-site scripting (XSS); vulnerability.
Description:	Summary: Foreman is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Insight: If an organization or location is created with a name containing HTML, then the administrator-only Settings page will render the HTML as part of a dropdown menu. This may permit a stored XSS attack if an organization/location with HTML in the name is created, when an administrator attempts to change the default organization/location settings. Affected Software/OS: Foreman versions 1.11.x through 1.12.4. Solution: Update to version 1.13.0 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-8639 BugTraq ID: 94263 http://www.securityfocus.com/bid/94263 RedHat Security Advisories: RHSA-2018:0336 https://access.redhat.com/errata/RHSA-2018:0336
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.