8.9
Élevée
CVE-2022-4975 A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal
Description
A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configmanagement/* endpoints, the front-end generates a DOM table-element (id="pdf-table"). This information is then populated with unsanitized data using innerHTML. An attacker with some control over the data rendered can trigger a cross-site scripting (XSS) vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Advanced Cluster Security 3 | Versions non publiées |
Références
- access.redhat.com access.redhat.com
- RHBZ#2071527 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Advanced Cluster Security 3
Les 4 CVE de Red Hat Advanced Cluster Security 3 →
CVE-2024-3727
Containers/image: digest type does not guarantee valid type
8.3
Élevée
CVE-2024-0406
A flaw was discovered in the mholt/archiver package
6.1
Moyenne
CVE-2023-4958
In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing,…
6.1
Moyenne