CVE-2018-1096CWE-89

An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1

published April 5, 2018

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01331 · 70.7th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2018-04-05T21:00Z
EPSS history
Timeline
  • 05 APR 21:00Z
    An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1
    cvelistv5