automation-controller-cli vulnerabilities (Red Hat)
106 vulnerabilities.
automation-controller-cliRed HatpyOpenSSL DTLS cookie callback buffer overflow7.2 Highautomation-controller-cliRed HatPyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)7.5 Highautomation-controller-cliRed HatIncorrect parsing of IPv6 host literals in net/url7.5 Highautomation-controller-cliRed HatPython-Markdown has an Uncaught Exception7.5 Highautomation-controller-cliRed HatRollup 4 has Arbitrary File Write via Path Traversal8.8 Highautomation-controller-cliRed Hatminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 Highautomation-controller-cliRed HatPotential SQL injection via QuerySet.order_by and FilteredRelation5.4 Mediumautomation-controller-cliRed HatPotential SQL injection in column aliases via control characters5.4 Mediumautomation-controller-cliRed HatPotential denial-of-service vulnerability in django.utils.text.Truncator HTML methods7.5 Highautomation-controller-cliRed HatPotential SQL injection via raster lookups on PostGIS5.4 Mediumautomation-controller-cliRed HatPotential denial-of-service vulnerability via repeated headers when using ASGI7.5 Highautomation-controller-cliRed HatDenial of Service in Python Protobuf8.2 Highautomation-controller-cliRed Hatwheel Allows Arbitrary File Permission Modification via Path Traversal7.1 Highautomation-controller-cliRed HatPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumautomation-controller-cliRed Hatpyasn1 has a DoS vulnerability in decoder7.5 Highautomation-controller-cliRed HatMemory exhaustion in query parameter parsing in net/url7.5 Highautomation-controller-cliRed HatReact Router vulnerable to XSS via Open Redirects8.0 Highautomation-controller-cliRed HatReact Router SSR XSS in ScrollRestoration8.2 Highautomation-controller-cliRed HatReact Router has XSS Vulnerability7.6 Highautomation-controller-cliRed HatAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb7.5 Highautomation-controller-cliRed HatAap-gateway: improper path validation in gateway allows credential exfiltration6.7 Mediumautomation-controller-cliRed HatPotential SQL injection via _connector keyword argument in QuerySet and Q objects9.1 Criticalautomation-controller-cliRed HatEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streams6.7 Mediumautomation-controller-cliRed HatEvent-driven-ansible: event stream test mode exposes sensitive headers in aap eda6.7 Mediumautomation-controller-cliRed Hatquic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame7.5 Highautomation-controller-cliRed HatAxios is vulnerable to DoS attack through lack of data size check7.5 Highautomation-controller-cliRed HatDjango Improper Output Neutralization for Logs vulnerability4.0 Mediumautomation-controller-cliRed Hatsetuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write7.7 Highautomation-controller-cliRed HatAutomation-controller: gain access to the k8s api server via job execution with container group6.6 Mediumautomation-controller-cliRed HatPulpcore: rbac permissions incorrectly assigned in tasks that create objects6.7 Mediumautomation-controller-cliRed HatDjango SQL injection vulnerability7.3 Highautomation-controller-cliRed HatDjango vulnerable to denial-of-service attack7.5 Highautomation-controller-cliRed HatDjango vulnerable to a denial-of-service attack7.5 Highautomation-controller-cliRed HatDjango memory consumption vulnerability7.5 Highautomation-controller-cliRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumautomation-controller-cliRed HatDjango vulnerable to Denial of Service7.5 Highautomation-controller-cliRed HatDjango Path Traversal vulnerability4.3 Mediumautomation-controller-cliRed HatDjango vulnerable to user enumeration attack5.3 Mediumautomation-controller-cliRed HatDjango vulnerable to Denial of Service7.5 Highautomation-controller-cliRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumautomation-controller-cliRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumautomation-controller-cliRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalautomation-controller-cliRed HatMalformed DNS message can cause infinite loop in net5.9 Mediumautomation-controller-cliRed Hatpython-jose algorithm confusion with OpenSSH ECDSA keys6.5 Mediumautomation-controller-cliRed Hatsocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 Mediumautomation-controller-cliRed HatAIOHTTP: HTTP request smuggling via WebSocket upgrade6.3 Mediumautomation-controller-cliRed HatController: html injection in custom login info7.3 Highautomation-controller-cliRed HatSQL Injection in Django9.8 Criticalautomation-controller-cliRed HatSQL Injection in Django9.8 Criticalautomation-controller-cliRed Hatfast-uri vulnerable to host confusion via percent-encoded authority delimiters7.5 High- Show moreLoading…