https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:30:06.863472+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-0119 CVE-2023-0119 — Foreman: stored cross-site scripting in host tab 2026-10-04T07:30:06.879883+00:00

Affected: foreman, Red Hat Satellite 6.13 for RHEL 8, Red Hat Satellite 6.14 for RHEL 8

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.