{"id":"CVE-2023-3971","state":"PUBLISHED","title":"Controller: html injection in custom login info","description":"An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.","publishedAt":"2023-10-04T14:26:01.621Z","updatedAt":"2025-11-20T19:51:46.690Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","source":"redhat"},"assigner":"redhat","products":["Red Hat Red Hat Ansible Automation Platform 2.3 for RHEL 8","Red Hat Red Hat Ansible Automation Platform 2.3 for RHEL 9","Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8","Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9"],"affected":[{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.3 for RHEL 8","packageName":"automation-controller","defaultStatus":"affected","versions":[{"version":"0:4.3.11-1.el8ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform_developer:2.3::el9","cpe:/a:redhat:ansible_automation_platform:2.3::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.3::el8","cpe:/a:redhat:ansible_automation_platform:2.3::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.3::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.3 for RHEL 9","packageName":"automation-controller","defaultStatus":"affected","versions":[{"version":"0:4.3.11-1.el9ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform_developer:2.3::el9","cpe:/a:redhat:ansible_automation_platform:2.3::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.3::el8","cpe:/a:redhat:ansible_automation_platform:2.3::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.3::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.4 for RHEL 8","packageName":"automation-controller","defaultStatus":"affected","versions":[{"version":"0:4.4.1-1.el8ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.4 for RHEL 9","packageName":"automation-controller","defaultStatus":"affected","versions":[{"version":"0:4.4.1-1.el9ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9"]}],"references":["https://access.redhat.com/errata/RHSA-2023:4340","https://access.redhat.com/errata/RHSA-2023:4590","https://access.redhat.com/security/cve/CVE-2023-3971","https://bugzilla.redhat.com/show_bug.cgi?id=2226965"],"weaknesses":["CWE-80"],"ingestedAt":"2026-10-29T20:06:08.715Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/3xxx/CVE-2023-3971.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-3971","state":"PUBLISHED","datePublished":"2023-10-04T14:26:01.621Z","dateUpdated":"2025-11-20T19:51:46.690Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2023-07-27T07:24:40.604Z"},"containers":{"cna":{"title":"Controller: html injection in custom login info","descriptions":[{"lang":"en","value":"An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise."}],"affected":[{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.3 for RHEL 8","packageName":"automation-controller","defaultStatus":"affected","versions":[{"version":"0:4.3.11-1.el8ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform_developer:2.3::el9","cpe:/a:redhat:ansible_automation_platform:2.3::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.3::el8","cpe:/a:redhat:ansible_automation_platform:2.3::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.3::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.3 for RHEL 9","packageName":"automation-controller","defaultStatus":"affected","versions":[{"version":"0:4.3.11-1.el9ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform_developer:2.3::el9","cpe:/a:redhat:ansible_automation_platform:2.3::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.3::el8","cpe:/a:redhat:ansible_automation_platform:2.3::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.3::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.3::el9"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.4 for RHEL 8","packageName":"automation-controller","defaultStatus":"affected","versions":[{"version":"0:4.4.1-1.el8ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.4 for RHEL 9","packageName":"automation-controller","defaultStatus":"affected","versions":[{"version":"0:4.4.1-1.el9ap","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2.4::el8","cpe:/a:redhat:ansible_automation_platform:2.4::el9"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:4340","name":"RHSA-2023:4340","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4590","name":"RHSA-2023:4590","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3971","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2226965","name":"RHBZ#2226965","tags":["issue-tracking","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-80","description":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2025-11-20T19:51:46.690Z"},"datePublic":"2023-07-27T07:28:00.000Z","x_redhatCweChain":"CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)","timeline":[{"lang":"en","time":"2023-07-18T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2023-07-27T07:28:00.000Z","value":"Made public."}],"credits":[{"lang":"en","value":"Red Hat would like to thank Kunal Pusdekar (redhat) for reporting this issue."}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-3971","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-04-26T19:46:29.640652Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:17:34.925Z"}},{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/errata/RHSA-2023:4340","name":"RHSA-2023:4340","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4590","name":"RHSA-2023:4590","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3971","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2226965","name":"RHBZ#2226965","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T07:08:50.849Z"}}]}}}