CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects Java.
CVE
CVE-2024-4812
Severity
MEDIUM
CVSS
4.8
EPSS
0.27%
Java
Original NVD Description
A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user. This code can be executed when opening certain pages, for example, Host Collections.
Related CVEs
Other vulnerabilities affecting the same vendor(s)