description: An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.
problem types: CWE-89
affected:
{
product: Foreman
vendor: Foreman Project
versions:
status: affected, version: before 1.16.1
}