Just a question... is it specific from Red Hat OpenStack/Satellite? according to the references looks like a vulnerability on Foreman, and it should apply to other distributions where a vulnerable version is installed, doesn't it?

If it applies to foreman and isn't Red Hat OpenStack/Satellite distributions this title make things a little confusing on my opinion and something like "Foreman bookmarks/create Code Injection" should be more appropriate.