CVE-2018-11627: Red Hat Cloudforms

Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days.

Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

Affected products

• Red Hat Cloudforms: version 4.6 only; version 4.7 only
• Sinatrarb Sinatra: before 2.0.2 (fixed in 2.0.2)

Published 2018-05-31. Last modified 2026-06-17.