CVE-2022-3205

Controller: cross site scripting in automation controller ui

CVSS 4.6 MEDIUMEPSS 0.4%CWE-79

Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is susceptible to XSS injection

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Produtos afetados

Red Hat · Red Hat Ansible Automation Platform 1.2 Red Hat · Red Hat Ansible Automation Platform 2

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://access.redhat.com/security/cve/CVE-2022-3205 https://bugzilla.redhat.com/show_bug.cgi?id=2120597