Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-ansible-core) security update

Fixed packages 1

Vulnerabilities 1

• Medium 5.4
  CVE-2024-22195

  Jinja vulnerable to Cross-Site Scripting (XSS)

  Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …

  pallets jinja nodejs kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Jan 11, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2233300
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2257854
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2733.json
• report
  https://access.redhat.com/security/cve/CVE-2024-22195
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-22195
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-22195
• article
  https://github.com/pallets/jinja/releases/tag/3.1.3
• article
  https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95