Vulnerability Database

296,720

Total vulnerabilities in the database

CVE-2013-2121

Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.

  • Published: Jul 31, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-2121
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
theforeman / foreman - 1.2.0.x
redhat / openstack 3.0 3.0.x
theforeman / foreman 1.1 1.1.x