Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-jinja2 | 0:2.10.1-4.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-jinja2 | 0:2.10.1-4.el8 |
Vulnerabilities 1
-
Medium 5.4
Jinja vulnerable to Cross-Site Scripting (XSS)
Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2257854
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3102.json
-
report
https://access.redhat.com/security/cve/CVE-2024-22195
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-22195
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-22195
-
article
https://github.com/pallets/jinja/releases/tag/3.1.3
-
article
https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95