VDB

CVE-2016-6319

CVE-2016-6319 PUBLISHED

Reported by redhat · Published August 19, 2016

Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a, n/a

Timeline

  • Aug 19, 2016 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 14, 2022 CVE Updated
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 3, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 3, 2023 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score

References

  • RHSA-2018:0336 vendor-advisoryx_refsource_REDHAT
  • x_refsource_CONFIRM
  • x_refsource_CONFIRM
  • 92429 vdb-entryx_refsource_BID
  • x_refsource_CONFIRM
  • x_refsource_CONFIRM
  • x_refsource_CONFIRM
Open in Interactive Console →
$ Console Community · 100/wk Open console ›