CVE-2016-8613

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A flaw was found in foreman 1.5.1. The remote execution plugin runs commands on hosts over SSH from the Foreman web UI. When a job is submitted that contains HTML tags, the console output shown in the web UI does not escape the output causing any HTML or JavaScript to run in the user's browser. The output of the job is stored, making this a stored XSS vulnerability.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
The Foreman Projectforeman1.5.1

References

Timeline

Published
Jul 31, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-86147.5A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary toCVE-2016-86157.5A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequCVE-2016-86165.9A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and passCVE-2016-86177.0The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at leastCVE-2016-86189.8The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` muCVE-2016-86199.8The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.CVE-2016-86209.8The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled inCVE-2016-86217.5The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit shorCVE-2016-86229.8The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would beCVE-2016-86237.5A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to inCVE-2016-86247.5curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, andCVE-2016-86257.5curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and
CVE-2016-8613: Medium severity, CVSS 6.1 | Vulnix