7.3
High
CVE-2023-3971 An HTML injection flaw was found in Controller in the user interface settings
Description
An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Ansible Automation Platform 2.3 for RHEL 8 | Versions not published | |
| Red Hat Ansible Automation Platform 2.3 for RHEL 9 | Versions not published | |
| Red Hat Ansible Automation Platform 2.4 for RHEL 8 | Versions not published | |
| Red Hat Ansible Automation Platform 2.4 for RHEL 9 | Versions not published |