Total vulnerabilities in the database
Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst parameter to tftp/fetch_boot_file.
| Software | From | Fixed in |
|---|---|---|
| theforeman / foreman | 1.4.1 | 1.4.1.x |
| theforeman / foreman | 1.4.3 | 1.4.3.x |
| theforeman / foreman | 1.4.2 | 1.4.2.x |
| theforeman / foreman | 1.5.0 | 1.5.0.x |
| theforeman / foreman | - | 1.4.4.x |
| theforeman / foreman | 1.4.0 | 1.4.0.x |