Project

General

Profile

Actions
Copy link

Bug #25169

closed

CVE-2018-14664 - Persisted XSS on all pages that use breadcrumbs

Added by Marek Hulán about 6 years ago. Updated about 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Amir Fefer
Category:
Security
Target version:
1.18.3
Difficulty:
Triaged:
No
Bugzilla link:
1652999
Pull request:
https://github.com/theforeman/foreman/pull/6132
Fixed in Releases:
1.18.3, 1.19.1, 1.20.0
Found in Releases:
1.18.0
Red Hat JIRA:

Description

If user has the permission to edit resource which attribute is user in the breadcrumbs bar, it's not properly escaped allowing attacker to store code, that will be executed on client side. E.g. create a domain with name test.<b>com</b>, the go to it's edit form. See the breadcrumb didn't escape the HTML code.

This has been introduced in 1.18

Related issues 3 (0 open — 3 closed)

Related to Foreman - Feature #22855: Add redux container for breadcrumb switcherClosedAmir Fefer03/12/2018Actions
Related to Foreman - Bug #25503: Breadcrumb show allow truncation with full title in tooltip on mouse hoverClosedAdam RuzickaActions
Related to Foreman - Bug #26822: Create host in breadcrumbs in host detail page after creating a hostClosedTomer BriskerActions
Actions
Copy link

Also available in: Atom PDF