Skip to content
OpenAdvisories
Medium WID-SEC-2024-2229 3 CVEs

Red Hat Ansible Automation Platform: Mehrere Schwachstellen

Published Sep 26, 2024 · Updated Feb 8, 2026 · Revision 3 · de-DE

Vendor: Red Hat Vendor: SUSE Product: Ansible Automation Platform Product: openSUSE Platform: Linux

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder vertrauliche Informationen offenzulegen.

Product

Red Hat Ansible Automation Platform ist eine End-to-End-Automatisierungsplattform für die Systemkonfiguration, die Softwarebereitstellung und die Orchestrierung erweiterter Workflows.

Vulnerabilities 3

  • Medium 6.1
    CVE-2024-21520 Public exploit

    Cross-site Scripting in djangorestframework

    Versions of the package djangorestframework before 3.15.2 are vulnerable to Cross-site Scripting (XSS) via the break_long_headers template filter due to improper input sanitization before splitting and joining with <br> tags.

    djangorestframework djangorestframework djangorestframework Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2024-41810 Scanner template

    HTML injection in HTTP redirect body

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. The `twisted.web.util.redirectTo` function contains an HTML injection vulnerability. If application code allows an attacker to control the redirect URL this vulnerability m…

    twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI
  • Medium 4.4
    CVE-2024-37891

    Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3

    urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3'…

    urllib3 urllib3 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi PyPI

Revision history

  1. #3

    Neue Updates von openSUSE aufgenommen

  2. #2

    Neue Updates von openSUSE aufgenommen

  3. #1

    Initiale Fassung

References