A flaw was found in CloudForms's v2v infrastructure mapping delete feature. A stored cross-site scripting in CloudForms 18.104.22.168 build due to improper sanitization of user input in Name field.
Name: Yadnyawalk Tale (Red Hat CloudForms QE)
This issue has been addressed in the following products:
CloudForms Management Engine 5.10
Via RHSA-2019:2587 https://access.redhat.com/errata/RHSA-2019:2587
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):