Security
فارسی
All products

CloudForms Management Engine 5/cfme-amazon-smartstate

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Rack allows Percent-encoded cookies to overwrite existing prefixed cookie namesCVE-2020-8184 · GHSA-J6W9-FV6Q-3Q52 CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset Red HatRubyGems High Fix reported
XSS in Action ViewCVE-2020-15169 · GHSA-CFJV-5498-MPH5 CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset Red HatRubyGems Medium Fix reported
Directory traversal in Rack::Directory app bundled with RackCVE-2020-8161 · GHSA-5F9H-9PJV-V6J7 CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset Red HatRubyGems High Fix reported
Cross site scripting vulnerability in ActionViewCVE-2020-5267 · GHSA-65CV-R6X7-79HV CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset Red HatRubyGems Medium Fix reported
OS Command Injection in RakeCVE-2020-8130 · GHSA-JPPV-GW3R-W3Q8 CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset Red HatRubyGems Medium Fix reported
Loofah Allows Cross-site ScriptingCVE-2019-15587 · GHSA-C3GV-9CXF-6F57 CloudForms Management Engine 5/cfme-amazon-smartstateCloudForms Management Engine 5/cfme-gemset Red HatRubyGems Medium Fix reported