CVE-2024-10033
Fixed in a distro release EPSS <1%CVSS 6.1
A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. This flaw allows a malicious user to perform actions that impact users by using the "?next=" in a URL, which can lead to redirecting, injecting malicious script, stealing sessions and data.
Products: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat ansible automation platform 2.5 | automation-controller-venv-tower | 0:4.6.2-1.el9ap |
| Red Hat ansible automation platform 2.5 | automation-controller-venv-tower | 0:4.6.2-1.el8ap |
| Red Hat ansible automation platform 2.5 | automation-gateway-server | 0:2.5.3-1.el9ap |
| Red Hat ansible automation platform 2.5 | automation-gateway-server | 0:2.5.3-1.el8ap |
| Red Hat ansible automation platform 2.5 | receptor | 0:1.4.9-2.el9ap |
| Red Hat ansible automation platform 2.5 | receptor | 0:1.4.9-2.el8ap |
| Red Hat ansible automation platform 2.5 | receptor-debuginfo | 0:1.4.9-2.el8ap |
| Red Hat ansible automation platform 2.5 | receptor-debuginfo | 0:1.4.9-2.el9ap |
| Red Hat ansible automation platform 2.5 | receptor-debugsource | 0:1.4.9-2.el9ap |
| Red Hat ansible automation platform 2.5 | receptor-debugsource | 0:1.4.9-2.el8ap |
| Red Hat ansible automation platform 2.5 | receptorctl | 0:1.4.9-2.el9ap |
| Red Hat ansible automation platform 2.5 | receptorctl | 0:1.4.9-2.el8ap |
| Red Hat ansible automation platform developer 2.5 | receptor | 0:1.4.9-2.el9ap |
| Red Hat ansible automation platform developer 2.5 | receptor | 0:1.4.9-2.el8ap |
| Red Hat ansible automation platform developer 2.5 | receptorctl | 0:1.4.9-2.el9ap |
| Red Hat ansible automation platform developer 2.5 | receptorctl | 0:1.4.9-2.el8ap |
| Red Hat ansible automation platform inside 2.5 | receptor | 0:1.4.9-2.el9ap |
| Red Hat ansible automation platform inside 2.5 | receptor | 0:1.4.9-2.el8ap |
| Red Hat ansible automation platform inside 2.5 | receptorctl | 0:1.4.9-2.el9ap |
| Red Hat ansible automation platform inside 2.5 | receptorctl | 0:1.4.9-2.el8ap |