Red Hat Security AdvisoryRHSA-2019:0315
CloudForms 4.6.8 security, bug fix and enhancement update
Released 2019-02-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CloudForms Management Engine 5.9 cfme-5.9.8.1-1.el7cf, cfme-amazon-smartstate-5.9.8.1-1.el7cf, cfme-appliance-5.9.8.1-1.el7cf +4
Fixes 1 record
Priority LOW 31
Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02159 · Published 2018-05-31 · Fixed in 2.0.2 CWE-79
