CVE-2022-3205CWE-79

Controller: cross site scripting in automation controller ui

Medium · published September 13, 2022

CVSS v3.1
4.6
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is susceptible to XSS injection

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00514 · 42.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-09-13T19:19Z
EPSS history
Timeline
  • 13 SEP 19:19Z
    Controller: cross site scripting in automation controller ui
    cvelistv5