RHSA-2021:0778HighCVSS 6.7

Red Hat Security Advisory: Red Hat Ansible Tower 3.6.7-1 - Container security and bug fix update

Published
March 9, 2021
Last Modified
June 15, 2026

🔗 CVE IDs covered (5)

CVE-2020-11022 →CVE-2020-11023 →CVE-2020-35678 →CVE-2021-20253 →CVE-2019-20372 →

📋 Description

CVE-2019-20372 — nginx: HTTP request smuggling in configurations with URL redirect used as error_page CVE-2020-11022 — jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method CVE-2020-11023 — jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-35678 — python-autobahn: allows redirect header injection CVE-2021-20253 — ansible-tower: Privilege escalation via job isolation escape

🔗 References (8)