Red Hat Security AdvisoryRHSA-2023:5701
Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update
Released 2023-10-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.3 for RHEL 8 ansible-core-2.14.11-1.el8ap, automation-controller-venv-tower-4.3.16-1.el8ap
- Red Hat Ansible Automation Platform 2.3 for RHEL 9 ansible-core-2.14.11-1.el9ap, automation-controller-venv-tower-4.3.16-1.el9ap
Fixes 2 records
Priority LOW 36
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode cha…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01519 · Published 2023-11-03 · Partial fix · 3.2.21, 4.1.11 +1 CWE-1284
Priority LOW 30
An absolute path traversal attack exists in the Ansible automation platform.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.01013 · Published 2023-12-18 · Partial fix · 2.14.11-1.el8ap, 2.14.11-1.el9ap +3 CWE-36
