Read the docs
Red Hat Security Advisory

RHSA-2020:5249

security update - Red Hat Ansible Tower 3.7.4-1 - RHEL7 Container

Released 2020-11-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 6 records

TI-2020-08897 CVE-2020-11023 · GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

Priority CRITICAL 88KEV

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.84887 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 CWE-79
TI-2020-08896 CVE-2020-11022 · GHSA-gxr4-xjj5-5px2

jQuery has a potential XSS vulnerability

Priority HIGH 75

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.99215 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 +2 CWE-79
TI-2020-06240 CVE-2020-7720 · GHSA-92xj-mqp7-vmcj

Prototype pollution in node-forge

Priority MEDIUM 48

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03188 Published 2020-09-01 Fixed in 0.10.0 CWE-1321
TI-2020-06261 CVE-2020-7743 · GHSA-x2fc-mxcx-w4mf

Prototype pollution in mathjs

Priority LOW 39

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.03924 Published 2020-10-13 Partial fix · 7.5.1 CWE-1321
TI-2020-06196 CVE-2020-7676 · GHSA-mhp6-pxh8-r675

Cross-site scripting in angular.js

Priority LOW 28

angular.js prior to 1.8.0 allows cross site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01932 Published 2020-06-08 Partial fix · 1.8.0 CWE-79