Project

General

Profile

Actions
Copy link

Bug #6580

closed

CVE-2014-3531 - XSS in operating system name / description

Added by Dominic Cleal over 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
High
Assignee:
Daniel Lobato Garcia
Category:
Security
Target version:
1.5.2
Difficulty:
Triaged:
Bugzilla link:
1106417
Pull request:
https://github.com/theforeman/foreman/pull/1580
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Reported by Jan Hutař via RHBZ:

There is a possible XSS with operating system name/description.

Version-Release number of selected component (if applicable):
Satellite-6.0.3-RHEL-6-20140605.0

How reproducible:
always

Steps to Reproduce:
1. Go to Hosts -> Operating systems -> Create new operating system
2. Fill "Name: T<b>OD</b>O" in
- OR -
Fill some "Name" and "Description: T<b>OD</b>O" in
3. Submit

Actual results:
In a list of operating systems unescaped string is displayed

Expected results:
HTML should be escaped

Actions
Copy link
 #1

Updated by Dominic Cleal over 10 years ago

  • Subject changed from XSS in operating system name / description to CVE-2014-3531 - XSS in operating system name / description
Actions
Copy link
 #2

Updated by Daniel Lobato Garcia over 10 years ago

  • Status changed from Assigned to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/1580 added
  • Pull request deleted ()
Actions
Copy link
 #3

Updated by Daniel Lobato Garcia over 10 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by The Foreman Bot over 10 years ago

  • Status changed from Closed to Ready For Testing
Actions
Copy link
 #5

Updated by Dominic Cleal over 10 years ago

  • Status changed from Ready For Testing to Closed
Actions
Copy link
 #6

Updated by Dominic Cleal over 10 years ago

Fix released today in Foreman 1.5.2. Details posted on http://theforeman.org/security.html#2014-3531.

Actions
Copy link

Also available in: Atom PDF