Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2026/09/23 10:13 p.m.4 views

automation-controller: automation-controller-container: automation-controller: Notification template Jinja whitelist bypass via conditional gating leaks tracebacks

Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts job'job'+'env' and % if job.id 100 % conditional gating bypass both the AST check and the test-render stub has small job.id. At runtime, the gated branch executes and exceptions write full tracebacks...

2.7CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder