Bug 2257854 (CVE-2024-22195)
| Summary: | CVE-2024-22195 jinja2: HTML attribute injection when passing user input as keys to xmlattr filter | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | TEJ RATHI <trathi> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | adudiak, amctagga, aoconnor, bbuckingham, bcourt, bdettelb, bniver, eglynn, ehelms, epacific, flucifre, gmeno, godas, gtanzill, hhorak, jason.frey, jcammara, jchui, jhardy, jjoyce, jneedle, jobarker, jorton, jschluet, jsherril, kshier, ktsao, lhh, lsvaty, lzap, mabashia, mbenjamin, mburns, mgarciac, mhackett, mhulan, mminar, nboldt, nmoumoul, orabin, pcreech, pgrist, python-maint, rbiba, rchan, rhos-maint, rtaniwa, shrjoshi, simaishi, smcdonal, sostapov, sskracic, stcannon, teagle, tfister, tkral, tvignaud, vereddy, yguenane, zsadeh |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | jinja2 3.1.3 | Doc Type: | --- |
| Doc Text: |
A cross-site scripting (XSS) flaw was found in Jinja2 due to the xmlattr filter allowing keys with spaces, contrary to XML/HTML attribute standards. If an application accepts user-input keys and renders them for other users, attackers can inject additional attributes, potentially leading to XSS. This misuse of the xmlattr filter enables the injection of arbitrary HTML attributes, bypassing auto-escaping and potentially circumventing attribute validation checks.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2257864, 2257865, 2257866, 2257867, 2257868, 2257869, 2257870, 2257871, 2257872, 2257873, 2257875, 2257877, 2257878, 2257879, 2257880, 2260519 | ||
| Bug Blocks: | 2257882 | ||
|
Description
TEJ RATHI
2024-01-11 10:25:24 UTC
Upstream Commit: https://github.com/pallets/jinja/commit/7dd3680e6eea0d77fde024763657aa4d884ddb23 (3.1.3) Created mingw-python-jinja2 tracking bugs for this issue: Affects: fedora-all [bug 2257865] Created python-jinja2 tracking bugs for this issue: Affects: fedora-all [bug 2257864] Created python3-jinja2 tracking bugs for this issue: Affects: epel-all [bug 2257868] Created python3.11-jinja2-epel tracking bugs for this issue: Affects: epel-all [bug 2257867] Created python39-jinja2-epel tracking bugs for this issue: Affects: epel-all [bug 2257866] This issue has been addressed in the following products: Red Hat Ansible Automation Platform 2.4 for RHEL 9 Red Hat Ansible Automation Platform 2.4 for RHEL 8 Via RHSA-2024:1057 https://access.redhat.com/errata/RHSA-2024:1057 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.0 Extended Update Support Via RHSA-2024:1155 https://access.redhat.com/errata/RHSA-2024:1155 This issue has been addressed in the following products: Red Hat Satellite 6.14 for RHEL 8 Via RHSA-2024:1536 https://access.redhat.com/errata/RHSA-2024:1536 This issue has been addressed in the following products: Red Hat Ansible Automation Platform 2.4 for RHEL 9 Red Hat Ansible Automation Platform 2.4 for RHEL 8 Via RHSA-2024:1640 https://access.redhat.com/errata/RHSA-2024:1640 This issue has been addressed in the following products: RHUI 4 for RHEL 8 Via RHSA-2024:1878 https://access.redhat.com/errata/RHSA-2024:1878 This issue has been addressed in the following products: Red Hat Satellite 6.15 for RHEL 8 Via RHSA-2024:2010 https://access.redhat.com/errata/RHSA-2024:2010 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2132 https://access.redhat.com/errata/RHSA-2024:2132 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:2348 https://access.redhat.com/errata/RHSA-2024:2348 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:2968 https://access.redhat.com/errata/RHSA-2024:2968 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:2987 https://access.redhat.com/errata/RHSA-2024:2987 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:3102 https://access.redhat.com/errata/RHSA-2024:3102 This issue has been addressed in the following products: Red Hat OpenStack Platform 17.1 for RHEL 9 Via RHSA-2024:2733 https://access.redhat.com/errata/RHSA-2024:2733 This issue has been addressed in the following products: Red Hat Ceph Storage 7.1 Via RHSA-2024:3927 https://access.redhat.com/errata/RHSA-2024:3927 |