CVE-2018-1096

—

CVSS 3.0

6.5 medium

EPSS

1%p70

Published

Apr 5, 2018 (Apr 5, 2018)

Modified

Jun 17, 2026

Description

An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.

Vendors: theforeman redhat
Products: foreman, satellite
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.