Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-4812)
CVE编号
CVE-2024-4812
利用情况
暂无
补丁情况
N/A
披露时间
2024-06-05
漏洞描述
A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user. This code can be executed when opening certain pages, for example, Host Collections.