CVE-2018-1096 | BDVDB-2026-98986 Detail

Foreman ProjectForeman

Description#

An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://access.redhat.com/errata/RHSA-2018:2927
https://bugzilla.redhat.com/show_bug.cgi?id=1561061
http://projects.theforeman.org/issues/23028

Exploit#

No public exploit known

History#

Version 12018-04-05Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.