Skip to content
OpenAdvisories
Critical RHSA-2022:5702 2 CVEs

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.1.2 security and bug fix update

Published Sep 18, 2024 · Updated Feb 18, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.1::el8 automation-controller 0:4.1.2-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.1::el8 automation-controller-cli 0:4.1.2-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.1::el8 automation-controller-server 0:4.1.2-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.1::el8 automation-controller-ui 0:4.1.2-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.1::el8 automation-controller-venv-tower 0:4.1.2-2.el8ap
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.1::el8 python-django 0:3.2.13-1.el8pc
Red Hat · Ansible Automation Platform 2 ansible_automation_platform:2.1::el8 python38-django 0:3.2.13-1.el8pc

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-28346 Public exploit EPSS 19%

    SQL Injection in Django

    An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the pass…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Critical 9.8
    CVE-2022-28347

    SQL Injection in Django

    A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection paylo…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072447
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072459
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5702.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-28346
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-28346
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-28346
  • article
    https://www.djangoproject.com/weblog/2022/apr/11/security-releases/
  • report
    https://access.redhat.com/security/cve/CVE-2022-28347
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-28347
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-28347