7.3
High
CVE-2023-3971 An HTML injection flaw was found in Controller in the user interface settings
Description
An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Ansible Automation Platform 2.3 for RHEL 8 | Versions not published | |
| Red Hat Ansible Automation Platform 2.3 for RHEL 9 | Versions not published | |
| Red Hat Ansible Automation Platform 2.4 for RHEL 8 | Versions not published | |
| Red Hat Ansible Automation Platform 2.4 for RHEL 9 | Versions not published |
References
- RHSA-2023:4340 access.redhat.com
- RHSA-2023:4590 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2226965 bugzilla.redhat.com
Timeline
- Published
- Last modified