CVE-2018-14664

Name of the Vulnerable Software and Affected Versions Foreman versions 1.18 and later

Description A stored cross-site scripting issue exists due to improperly escaped HTML code in the breadcrumbs bar, allowing a user with permissions to edit the attribute used in the breadcrumbs bar to store code that will be executed on the client side.

Recommendations For Foreman version 1.18, update to a version that includes a fix for this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.