| Package | Affected versions | Patched versions |
|---|---|---|
| foreman | = 0.1= 0.2= 0.3= 0.4= 0.4.1≤ 1.0 |
The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free