Skip to content
Sign in
6.5 Medium

CVE-2018-10854 cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting

Description

cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure mapping delete feature. A stored cross-site scripting due to improper sanitization of user input in Name field.

Affected products and versions

Product Affected versions Fixed in
cloudforms Versions not published

Other CVEs of cloudforms

The 5 CVEs of cloudforms →
CVE-2019-10177 A stored cross-site scripting (XSS) vulnerability was found in the PDF export component of CloudForms, versions 5.9… 6.5 Medium CVE-2017-2653 A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead… 4.1 Medium CVE-2017-15125 A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not… 6.5 Medium CVE-2017-2664 CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the… 6.5 Medium
Track this CVE