Red Hat Security AdvisoryRHSA-2023:4692
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2023-08-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-4.4.2-1.el8ap, automation-controller-venv-tower-4.4.2-1.el8ap
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-4.4.2-1.el9ap, automation-controller-venv-tower-4.4.2-1.el9ap
Fixes 2 records
Priority HIGH 74
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.62575 · Published 2023-02-15 · Partial fix · 3.2.18, 4.1.7 +1 CWE-400
Priority MEDIUM 44
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name la…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02978 · Published 2023-07-03 · Partial fix · 3.2.20, 4.1.10 +1 CWE-1333
