Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary code via a controller name attribute.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2013-07-31T10:00:00Z

Updated: 2024-08-06T15:27:40.678Z

Reserved: 2013-02-19T00:00:00Z

Link: CVE-2013-2121

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-07-31T13:20:25.127

Modified: 2023-02-13T04:42:53.773

Link: CVE-2013-2121

cve-icon Redhat

Severity : Important

Publid Date: 2013-06-07T00:00:00Z

Links: CVE-2013-2121 - Bugzilla