CVE-2014-3491
Cross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes.
- Affected products
- Foreman
- Theforeman Foreman
- ≤ 1.4.4, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.5.0
- Fix
- Available
- CVSS 2.0
- 4.3 MEDIUM
- EPSS
- 1.5% (71th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2014-07-01
CVE-2014-3491 at NVD
No indexed exploits for CVE-2014-3491 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2014-3491 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.