Lucene search

K
redhatRedHatRHSA-2022:8872
HistoryDec 07, 2022 - 8:09 p.m.

(RHSA-2022:8872) Important: Red Hat OpenStack Platform 16.1.9 (python-django20) security update

2022-12-0720:09:57
access.redhat.com
19
rhsa-2022-8872
sql injection
xss
denial of service
cve-2022-28346
cve-2022-22818
cve-2022-23833
red hat openstack platform

0.018 Low

EPSS

Percentile

88.3%

Security Fix(es):

  • SQL injection in QuerySet.annotate() aggregate() and extra()
    (CVE-2022-28346)

  • Possible XSS via ‘{% debug %}’ template tag (CVE-2022-22818)

  • Denial of service possibility in file uploads (CVE-2022-23833)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.