CVE-2018-10854

cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure mapping delete feature. A stored cross-site scripting due to improper sanitization of user input in Name field.

Score

CVSS 3.0 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2019-11-22

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Cloudforms (Red Hat)
• Cloudforms Management Engine (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10854