TI-2024-22527 CVE-2024-34069 · GHSA-2g68-c3qc-8985
Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution
Priority MEDIUM 41
Werkzeug is a comprehensive WSGI web application library.
RHSA-2024:5810
OpenShift Container Platform 4.12.64 security update
Released 2024-08-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Ironic content for Red Hat OpenShift Container Platform 4.12 python-jinja2-3.0.1-3.el9.1, python-werkzeug-2.0.3-6.el9, python3-jinja2-3.0.1-3.el9.1 +1
- Red Hat OpenShift Container Platform 4.12 openshift-4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8, openshift-4.12.0-202408131833.p0.g1eb8682.assembly.stream.el9, openshift-hyperkube-4.12.0-202408131833.p0.g1eb8682.assembly.stream.el8 +1
Fixes 3 records
TI-2023-24280 CVE-2023-45290 · GHSA-rr6r-cfgf-gc6h
Memory exhaustion in multipart form parsing in net/textproto and net/http
Priority LOW 31
When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…
TI-2024-22522 CVE-2024-34064 · GHSA-h75v-3vvj-5mfj
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
Priority LOW 26
Jinja is an extensible templating engine.