automation-controller-ui vulnerabilities (Red Hat)
90 vulnerabilities.
automation-controller-uiRed HatPotential denial-of-service vulnerability via repeated headers when using ASGI7.5 Highautomation-controller-uiRed HatDenial of Service in Python Protobuf8.2 Highautomation-controller-uiRed Hatwheel Allows Arbitrary File Permission Modification via Path Traversal7.1 Highautomation-controller-uiRed HatPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumautomation-controller-uiRed Hatpyasn1 has a DoS vulnerability in decoder7.5 Highautomation-controller-uiRed HatMemory exhaustion in query parameter parsing in net/url7.5 Highautomation-controller-uiRed HatReact Router vulnerable to XSS via Open Redirects8.0 Highautomation-controller-uiRed HatReact Router SSR XSS in ScrollRestoration8.2 Highautomation-controller-uiRed HatReact Router has XSS Vulnerability7.6 Highautomation-controller-uiRed HatAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb7.5 Highautomation-controller-uiRed HatAap-gateway: improper path validation in gateway allows credential exfiltration6.7 Mediumautomation-controller-uiRed HatPotential SQL injection via _connector keyword argument in QuerySet and Q objects9.1 Criticalautomation-controller-uiRed HatEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streams6.7 Mediumautomation-controller-uiRed HatEvent-driven-ansible: event stream test mode exposes sensitive headers in aap eda6.7 Mediumautomation-controller-uiRed Hatquic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame7.5 Highautomation-controller-uiRed HatAxios is vulnerable to DoS attack through lack of data size check7.5 Highautomation-controller-uiRed HatDjango Improper Output Neutralization for Logs vulnerability4.0 Mediumautomation-controller-uiRed Hatsetuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write7.7 Highautomation-controller-uiRed HatAutomation-controller: gain access to the k8s api server via job execution with container group6.6 Mediumautomation-controller-uiRed HatPulpcore: rbac permissions incorrectly assigned in tasks that create objects6.7 Mediumautomation-controller-uiRed HatDjango SQL injection vulnerability7.3 Highautomation-controller-uiRed HatDjango vulnerable to denial-of-service attack7.5 Highautomation-controller-uiRed HatDjango vulnerable to a denial-of-service attack7.5 Highautomation-controller-uiRed HatDjango memory consumption vulnerability7.5 Highautomation-controller-uiRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumautomation-controller-uiRed HatDjango vulnerable to Denial of Service7.5 Highautomation-controller-uiRed HatDjango Path Traversal vulnerability4.3 Mediumautomation-controller-uiRed HatDjango vulnerable to user enumeration attack5.3 Mediumautomation-controller-uiRed HatDjango vulnerable to Denial of Service7.5 Highautomation-controller-uiRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumautomation-controller-uiRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumautomation-controller-uiRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalautomation-controller-uiRed HatMalformed DNS message can cause infinite loop in net5.9 Mediumautomation-controller-uiRed Hatpython-jose algorithm confusion with OpenSSH ECDSA keys6.5 Mediumautomation-controller-uiRed Hatsocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 Mediumautomation-controller-uiRed HatController: html injection in custom login info7.3 Highautomation-controller-uiRed HatSQL Injection in Django9.8 Criticalautomation-controller-uiRed HatSQL Injection in Django9.8 Criticalautomation-controller-uiRed Hatfast-uri vulnerable to host confusion via percent-encoded authority delimiters7.5 Highautomation-controller-uiRed HatDOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)6.0 Medium