Security Advisory
CVE-2017-7535
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action.