CVE-2017-7535

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-26 · updated 2026-06-17
Weakness: CWE-79

Description

foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action.

Affected products

foreman: before 1.16.0 — fixed in 1.16.0

How to fix

Upgrade to a fixed version: foreman 1.16.0. Check the vendor advisory for mitigations.

References

http://seclists.org/oss-sec/2017/q3/521
http://www.securityfocus.com/bid/99604
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7535
https://projects.theforeman.org/issues/20963
http://seclists.org/oss-sec/2017/q3/521
http://www.securityfocus.com/bid/99604
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7535
https://projects.theforeman.org/issues/20963

Get alerted when CVE-2017-7535 or the next vulnerability affects your stack