Design/Logic Flaw

2023-10-0415:15:00

PRIOn knowledge base

www.prio-n.com

html injection

user interface

credentials capture

design flaw

logic flaw

compromise

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

JSON

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.

CPENameOperatorVersion
ansible_automation_controllereq4.4
ansible_automation_controllerlt4.3.11
ansible_automation_platformeq2.3
ansible_automation_platformeq2.4
ansible_developereq1.0
ansible_insideeq1.1

Name	Operator	Version
ansible_automation_controller	eq	4.4
ansible_automation_controller	lt	4.3.11
ansible_automation_platform	eq	2.3
ansible_automation_platform	eq	2.4
ansible_developer	eq	1.0
ansible_inside	eq	1.1