CVE-2023-3971

CVE-2023-3971CVE-2023-3971

redhat / ansible_automation_controller

Description

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.

Scoring

CVSS 7.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Last modified2026-11-07
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.