CVE-2023-0462
Arbitrary code execution through yaml global parameters
Résumé
Arbitrary code execution through yaml global parameters
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.
Références
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- report bugzilla.redhat.com
- web access.redhat.com