VDB

CVE-2014-0089

CVE-2014-0089 PUBLISHED

Reported by redhat · Published March 27, 2014

Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a, n/a, n/a

Timeline

  • Mar 27, 2014 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 17, 2022 CVE Updated
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Oct 28, 2022 EPSS Score
  • Dec 20, 2022 EPSS Score
  • Feb 11, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 28, 2023 EPSS Score

References

  • x_refsource_MISC
  • x_refsource_CONFIRM
  • x_refsource_CONFIRM
  • 57575 third-party-advisoryx_refsource_SECUNIA
Open in Interactive Console →
$ Console Community · 100/wk Open console ›