title: Red Hat Security Advisory: CloudForms 4.7 security, bug fix and enhancement update
description: rubygem-nokogiri: XML eXternal Entity (XXE) flaw rubygem-rails-html-sanitizer: non-whitelisted attributes are present in sanitized output when input with specially-crafted HTML fragments leading to XSS vulnerability rubygem-loofah: XSS vulnerability due to unescaped comments within attributes by libxml2 rubygem-sinatra: XSS in the 400 Bad Request page
cpes: cpe:/a:redhat:cloudforms_managementengine:5.10::el7