Skip to content
fr Sign in
Not rated

CVE-2020-10778 In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled…

Description

In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation. This business logic flaw violate the expected behavior.

Affected products and versions

Product Affected versions Fixed in
CloudForms Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of CloudForms

The 10 CVEs of CloudForms →
CVE-2020-25716 A flaw was found in Cloudforms Not rated CVE-2020-14369 This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users… Not rated CVE-2020-10780 Red Hat CloudForms 4.7 and 5 is affected by CSV Injection flaw, a crafted payload stays dormant till a victim export… Not rated CVE-2020-14324 A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0 Not rated
Track this CVE