Skip to content
fr Sign in
8.9 High

CVE-2022-4975 A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal

Description

A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configmanagement/* endpoints, the front-end generates a DOM table-element (id="pdf-table"). This information is then populated with unsanitized data using innerHTML. An attacker with some control over the data rendered can trigger a cross-site scripting (XSS) vulnerability.

Affected products and versions

Product Affected versions Fixed in
Red Hat Advanced Cluster Security 3 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Advanced Cluster Security 3

The 4 CVEs of Red Hat Advanced Cluster Security 3 →
CVE-2024-3727 Containers/image: digest type does not guarantee valid type 8.3 High CVE-2024-0406 A flaw was discovered in the mholt/archiver package 6.1 Medium CVE-2023-4958 In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing,… 6.1 Medium
Track this CVE