CVE-2018-1096

An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.

Date published : 2018-04-05

http://projects.theforeman.org/issues/23028

https://bugzilla.redhat.com/show_bug.cgi?id=1561061