Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) attacks via a destructive action in a request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Red Hat CloudForms Management Engine 跨站请求伪造漏洞
Vulnerability Description
Red Hat CloudForms Management Engine（CFME）是美国红帽（Red Hat）公司的一个IaaS（基础设施即服务）云服务解决方案的管理引擎。 CloudForms 3.0 Management Engine 5.2.1及之前版本中存在安全漏洞。远程攻击者可通过发送恶意的请求利用该漏洞绕过Ruby on Rails protect_from_forgery机制，并实施跨站请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A