Vulnerabilities fixed in Red Hat ipa

🗓️ 30 Sep 2020 00:00:00Reported by NCSCType

Red Hat ipa fixes address unauthenticated code execution via a rogue link, plus possible denial of service and data manipulation.

Reporter	Title	Published	Views	Family All 1007
zdt	jQuery 1.2 - Cross-Site Scripting Vulnerability	14 Apr 202100:00	–	zdt
vulnersOsv	allianceauth (>=2.1.0 <=2.1.1), beanstalk-dispatch (>=0.0.3 <=0.0.5) +214 more potentially affected by CVE-2019-11358 via django (>=2.0.0 <=2.1.8)	26 Apr 201916:29	–	vulnersosv
vulnersOsv	@agorize/gommette (>=1.4.1 <=1.4.2), @antarctica/bas-style-kit (>=0.5.0 <=0.5.0-beta) +154 more potentially affected by CVE-2019-8331 via bootstrap-sass (>=3.1.1 <=3.4.0)	22 Feb 201920:54	–	vulnersosv
vulnersOsv	@antarctica/bas-style-kit (>=0.5.0 <=0.5.0-beta), @antistatique/retraitespopulaires-styleguide (>=0.0.1 <=1.8.4) +153 more potentially affected by CVE-2018-14042 via bootstrap-sass (>=2.3.2 <=3.3.7)	13 Sep 201815:50	–	vulnersosv
vulnersOsv	@ajoursystem/arnisp-bootstrap-xlgrid (=1.0.0), @arivazhagan/demo-project (=1.0.1) +458 more potentially affected by CVE-2019-8331 via bootstrap (>=3.1.1 <=3.4.0)	22 Feb 201920:54	–	vulnersosv
vulnersOsv	au.com.intelix:rs-core-js_2.11 (=0.1.3.1), au.com.mountain-pass:hyperstate (>=1 <=9) +470 more potentially affected by CVE-2019-8331 via org.webjars:bootstrap (>=3.0.0 <=3.4.0)	22 Feb 201920:54	–	vulnersosv
vulnersOsv	aimmo (>=0.61.9 <=0.69.1b348), ambition-edc (>=0.3.68 <=0.3.72) +57 more potentially affected by CVE-2019-11358 via django (>=2.2.0 <=2.2.19)	26 Apr 201916:29	–	vulnersosv
vulnersOsv	@ajoursystem/arnisp-bootstrap-xlgrid (=1.0.0), @arivazhagan/demo-project (=1.0.1) +455 more potentially affected by CVE-2018-14042 via bootstrap (>=3.1.1 <=3.3.7)	13 Sep 201815:50	–	vulnersosv
vulnersOsv	@7ninjas/scss-mixins (=1.0.0-alpha3), @afiniti/design-system (>=0.0.1 <=0.0.8) +247 more potentially affected by CVE-2018-14042 via bootstrap (>=4.0.0 <=4.1.1)	13 Sep 201815:50	–	vulnersosv
vulnersOsv	@ajoursystem/arnisp-bootstrap-xlgrid (=1.0.0), @arivazhagan/demo-project (=1.0.1) +456 more potentially affected by CVE-2018-20676 via bootstrap (>=0.0.2 <=3.3.7)	17 Jan 201913:57	–	vulnersosv

30 Sep 2020 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 25.4

CVSS 36.1

CVSS 3.16.1 - 6.9

EPSS0.99019

SSVC