← All credits

This issue was discovered by Laura Pardo (Red Hat) and Toni Gornals (Red Hat).

10 vulnerability records and advisories credit this contributor.

Foreman: command injection in foreman-tail

Rubygem-katello: sql injection in registry proxy via labels

Rubygem-hammer_cli: command injection via insecure editor invocation

Foreman: command injection in foreman-rake database tasks

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

Foreman: unauthenticated information disclosure via provisioning token validation flaw

Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

Rubygem-katello: improper authorization logic allows resource enumeration

Foreman: ssti and insecure deserialization in foreman-rake configuration

Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse