Total vulnerabilities in the database
Multiple SQL injection vulnerabilities in app/models/concerns/host_common.rb in Foreman before 1.2.3 allow remote attackers to execute arbitrary SQL commands via the (1) fqdn or (2) hostgroup parameter.
| Software | From | Fixed in |
|---|---|---|
| redhat / openstack | 3.0 | 3.0.x |
| theforeman / foreman | 1.2.1 | 1.2.1.x |
| theforeman / foreman | 1.2.0-rc1 | 1.2.0-rc1.x |
| theforeman / foreman | 1.2.0 | 1.2.0.x |
| theforeman / foreman | - | 1.2.2.x |
| theforeman / foreman | 1.2.0-rc2 | 1.2.0-rc2.x |