CVE-2018-16861

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
The Foreman Projectforeman1.18.3; 1.19.1; 1.20.0

References

Timeline

Published
Dec 7, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-168625.5A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removaCVE-2018-168637.8It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypassCVE-2018-168647.8An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journaCVE-2018-168657.8An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journaCVE-2018-168663.3An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attackerCVE-2018-168677.8A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_data function in hw/usCVE-2018-168685.6A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5CVE-2018-168695.7A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted PKCS#1CVE-2018-168705.9It was found that wolfssl before 3.15.7 is vulnerable to a new variant of the Bleichenbacher attack to perform downgrade attacks against TLSCVE-2018-168717.5A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mouCVE-2018-168725.3A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and direCVE-2018-168738.1In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and
CVE-2018-16861: Medium severity, CVSS 4.8 | Vulnix