CVE-2020-10778

In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is…

published August 11, 2020

CVSS
—
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is no server-side validation. This business logic flaw violate the expected behavior.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00877 · 58.6th percentile
Published
2020-08-11T12:25Z
EPSS history
Timeline
  • 11 AUG 12:25Z
    In Red Hat CloudForms 4.7 and 5, the read only widgets can be edited by inspecting the forms and dropping the disabled attribute from the fields since there is…
    cvelistv5