CVE-2013-2121

This exploit targets a code injection vulnerability in Foreman and Red Hat OpenStack/Satellite (CVE-2013-2121). It authenticates, retrieves a CSRF token, and injects a Ruby payload via the 'bookmarks/create' endpoint.

This Metasploit module exploits a code injection vulnerability in Foreman and Red Hat OpenStack/Satellite by leveraging the 'bookmarks/create' endpoint to execute arbitrary Ruby code via crafted parameters. It authenticates, retrieves a CSRF token, and injects a payload into the 'bookmark[controller]' parameter.