VULNERABILITY INTELLIGENCE

CVE-2023-0118

CVSS score9.1 CRITICAL
EPSS probability1.38%
CISA KEVNot currently listed
Published2023-09-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.

Weakness classification

  • secalert@redhat.com: CWE-78
  • nvd@nist.gov: CWE-78

Primary references