REDHAT-BUG-2071527: XSS

Published Apr 4, 2022

Updated

A cross-site scripting vulnerability is present in Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table-view in the portal, (e.g. on any of the endpoints /main/configmanagement/), the front-end generates a DOM table-element (id="pdf-table"). This is then populated with unsanitized data using innerHTML. Since an attacker has some control over the data rendered, this makes it vulnerable to an XSS-attack.

Affected Software

1 affected component

Red Hat Advanced Cluster Security

Event History

Apr 4, 2022

Data Sourced

via Red Hat·06:18 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2071527?

REDHAT-BUG-2071527 is classified as a cross-site scripting vulnerability.

How do I fix REDHAT-BUG-2071527?

To fix REDHAT-BUG-2071527, ensure that the input for the affected DOM elements is properly sanitized before rendering.

What systems are affected by REDHAT-BUG-2071527?

REDHAT-BUG-2071527 affects the Red Hat Advanced Cluster Security portal.

What components are involved in the vulnerability REDHAT-BUG-2071527?

The vulnerability REDHAT-BUG-2071527 involves the rendering of a DOM table element with unsanitized data.

Is there a known exploit for REDHAT-BUG-2071527?

As of now, no known exploits for REDHAT-BUG-2071527 have been publicly reported.