CVE-2014-0089
Foreman <1.4.2 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark.
Scores
EPSS
0.0039
EPSS Percentile
59.7%
Details
CWE
CWE-79
Status
published
Products (3)
theforeman/foreman
theforeman/foreman
n/a/n/a
Published
Mar 27, 2014
Tracked Since
Feb 18, 2026