Bug 2508181 (CVE-2026-18147)
| Summary: | CVE-2026-18147 freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | abokovoy, frenaud, ftrivino, rhel-process-autobot, security-response-team, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS) vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute arbitrary JavaScript code. This allows the attacker to perform actions within the victim's authenticated session, potentially leading to full administrative control if an IdM administrator is targeted.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2530996 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-07-28 19:07:20 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:70564 https://access.redhat.com/errata/RHSA-2026:70564 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:72279 https://access.redhat.com/errata/RHSA-2026:72279 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:82935 https://access.redhat.com/errata/RHSA-2026:82935 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Via RHSA-2026:83085 https://access.redhat.com/errata/RHSA-2026:83085 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:83084 https://access.redhat.com/errata/RHSA-2026:83084 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:83083 https://access.redhat.com/errata/RHSA-2026:83083 This issue has been addressed in the following products: Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Via RHSA-2026:83461 https://access.redhat.com/errata/RHSA-2026:83461 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:83460 https://access.redhat.com/errata/RHSA-2026:83460 |