A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.

A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.

rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter foreman: unauthenticated information disclosure via provisioning token validation flaw foreman: command injection in foreman-rake errors:fetch_log via request_id parameter foreman: command injection in foreman-rake database tasks foreman: command injection in foreman-tail foreman: SSTI and insecure deserialization in foreman-rake configuration rubygem-hammer_cli: command injection via insecure editor invocation dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header postcss: PostCSS: Information disclosure and denial of service via crafted CSS input sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in SQL parsing rubygem-katello: SQL injection in Registry Proxy via labels rubygem-katello: improper authorization logic allows resource enumeration html/template: golang: Go html/template: Cross-Site Scripting via pathological input net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations sqlparse: sqlparse: Denial of Service v…