CVE-2022-3205

Name of the Vulnerable Software and Affected Versions Red Hat Ansible Automation Platform versions 1.2 through 2.0

Description The issue concerns cross-site scripting in the automation controller UI. Specifically, the project name is susceptible to XSS injection, which could lead to security issues.

Recommendations For Red Hat Ansible Automation Platform versions 1.2 through 2.0, consider sanitizing user input for project names to prevent XSS injection until a patch is available. As a temporary workaround, restrict the ability to create or edit project names to minimize the risk of exploitation.