Read the docs
Red Hat Security Advisory

RHSA-2021:0778

Red Hat Ansible Tower 3.6.7-1 - Container security and bug fix update

Released 2021-03-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2020-08897 CVE-2020-11023 · GHSA-jpcq-cgw6-v4j6

Potential XSS vulnerability in jQuery

Priority CRITICAL 88KEV

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.84887 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 CWE-79
TI-2020-08896 CVE-2020-11022 · GHSA-gxr4-xjj5-5px2

jQuery has a potential XSS vulnerability

Priority HIGH 75

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e.

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.99215 Published 2020-04-29 Partial fix · 3.5.0, 4.4.0 +2 CWE-79
TI-2019-14607 CVE-2019-20372 · GHSA-c9vh-3f9g-f2xf

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request…

Priority MEDIUM 40

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a l…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.14961 Published 2020-01-09 Partial fix CWE-444
TI-2021-03545 CVE-2021-20253 · GHSA-rr45-4xhx-rxc8

A flaw was found in ansible-tower.

Priority LOW 30

A flaw was found in ansible-tower.

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00411 Published 2021-03-09 Partial fix CWE-552