{"id":"CVE-2018-16861","details":"A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create entries using the Hosts, Monitor, Infrastructure, or Administer Menus is able to execute a XSS attacks against other users, possibly leading to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Foreman before 1.18.3, 1.19.1, and 1.20.0 are vulnerable.","modified":"2026-07-08T17:16:02.286814Z","published":"2018-12-07T19:29:00.193Z","references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:1222"},{"type":"FIX","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16861"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/theforeman/foreman","events":[{"introduced":"0"},{"fixed":"fa52e54e08c0ee7fc0445dd709033a9b755e3b46"},{"introduced":"ac7444a6307465fe1194913f4c253c1bae3cb6b1"},{"fixed":"a69c20d39dbee51a8ef2eabe5e2855fc856b3430"},{"introduced":"668691d32771ab6604e97a5d8cb4ee5957d12279"},{"last_affected":"73fe86f4748047e31b4459919e135a475666f5a3"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.20.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.20.0:rc2:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"1.18.3"},{"introduced":"1.19.0"},{"fixed":"1.19.1"},{"introduced":"1.20.0-rc1"},{"last_affected":"1.20.0-rc1"},{"introduced":"1.20.0-rc2"},{"last_affected":"1.20.0-rc2"}]}}],"versions":["1.20.0-rc1","1.20.0-rc2","1.20.0-RC2","1.20.0-RC1","1.18.2","1.19.0","1.18.1","1.18.0","1.18.0-RC3","1.18.0-RC2","1.18.0-RC1","1.1","1.1RC5","1.1RC4","1.1RC3","1.1RC2","1.1RC1","1.0","1.0RC5","1.0RC4","1.0RC3","1.0RC2","1.0RC1","0.4","0.4rc5","0.4rc4","0.4rc3","0.4rc2","0.3","0.2","0.2rc1","0.1-6","0.1-5","0.1-4","0.1-3","0.1-2","0.1-1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16861.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/theforeman/foreman-installer","events":[{"introduced":"0"},{"fixed":"ff4ed7789359e948af9b013ea260b5d6bb36f637"},{"introduced":"4f413eb471ce2fc0dad83ce672ef2a36d2d646e9"},{"fixed":"e290a801df566bd9b9994ff914364a73c1c04536"},{"introduced":"6d969215a94d2f459379728b2722c1df86f00085"},{"last_affected":"512fc58d196747298341079c34360e593fa91f25"}],"database_specific":{"cpe":["cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.20.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.20.0:rc2:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"1.18.3"},{"introduced":"1.19.0"},{"fixed":"1.19.1"},{"introduced":"1.20.0-rc1"},{"last_affected":"1.20.0-rc1"},{"introduced":"1.20.0-rc2"},{"last_affected":"1.20.0-rc2"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["1.20.0-rc1","1.20.0-rc2","1.20.0-RC2","1.19.0","1.18.2","1.20.0-RC1.1","1.20.0-RC1","1.18.1","1.18.0","1.18.0-RC3","1.18.0-RC2","1.18.0-RC1","1.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16861.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/theforeman/smart-proxy","events":[{"introduced":"0"},{"fixed":"6e9993f3c6307fd2caec3e54495ea5130326a564"},{"introduced":"285e11c18eb2d44f52023b54f1a9fd052485c514"},{"fixed":"29461f9b2e0eefe5bdd7ee331aa3e64f9f95e9fa"},{"introduced":"3c586522f54c2ee218987cebdbb4a2aa46c1ada5"},{"last_affected":"96bd3b68ffd70255fa33f69bf220fa75d9b69afc"}],"database_specific":{"cpe":["cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.20.0:rc1:*:*:*:*:*:*","cpe:2.3:a:theforeman:foreman:1.20.0:rc2:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"1.18.3"},{"introduced":"1.19.0"},{"fixed":"1.19.1"},{"introduced":"1.20.0-rc1"},{"last_affected":"1.20.0-rc1"},{"introduced":"1.20.0-rc2"},{"last_affected":"1.20.0-rc2"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["1.20.0-rc1","1.20.0-rc2","1.20.0-RC2","1.19.0","1.18.2","1.20.0-RC1","1.18.1","1.18.0","1.18.0-RC3","1.18.0-RC2","1.18.0-RC1","1.1","1.1RC3","1.1RC2","1.1RC1","1.0","1.0RC2","1.0RC1","0.3","0.2","0.2rc2","0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16861.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"}]}