CVE-2023-0462
Arbitrary code execution through yaml global parameters
Summary
Arbitrary code execution through yaml global parameters
Original description
The description as published by the source.
An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- web access.redhat.com