Red Hat Security AdvisoryRHSA-2023:5758
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2023-10-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 ansible-core-2.15.5-1.el8ap, automation-controller-venv-tower-4.4.6-1.el8ap, python39-django-3.2.22-1.el8ap +1
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 ansible-core-2.15.5-1.el9ap, automation-controller-venv-tower-4.4.6-1.el9ap, python-django-3.2.22-1.el9ap +1
Fixes 3 records
Priority LOW 36
In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via c…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01462 · Published 2023-11-03 · Partial fix · 3.2.22, 4.1.12 +1 CWE-1284
Priority LOW 36
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode cha…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01519 · Published 2023-11-03 · Partial fix · 3.2.21, 4.1.11 +1 CWE-1284
Priority LOW 30
An absolute path traversal attack exists in the Ansible automation platform.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.01013 · Published 2023-12-18 · Partial fix · 2.14.11-1.el8ap, 2.14.11-1.el9ap +3 CWE-36
