REDHAT-BUG-2476471: High severity unknown vulnerability
Published May 12, 2026
·Updated
When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No publicly available exploits are known.
Affected Software
1 affected component
unknown
Event History
May 12, 2026
Data Sourced
via Red Hat·02:01 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2476471?
The severity of REDHAT-BUG-2476471 is high with a score of 7.
2
How do I fix REDHAT-BUG-2476471?
To fix REDHAT-BUG-2476471, avoid using the safe filter until a fixed version is available.
3
What kind of attacks can REDHAT-BUG-2476471 enable?
REDHAT-BUG-2476471 can enable SQL and LDAP injection attacks if exploited.
4
What should I avoid doing related to REDHAT-BUG-2476471?
You should avoid using the safe filter when variable expansion is involved until the vulnerability is resolved.
5
Is there a fixed version for REDHAT-BUG-2476471?
As of now, the fixed version for REDHAT-BUG-2476471 has not been specified.