Known vulnerabilities in python3.11-django-ansible-base (Red Hat package)
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:python3.11-django-ansible-base_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
11
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-55565 |
CWE-835 | Medium | 2.5.20250115-1.el8ap, 2.5.20250115-1.el9ap | 08.01.2025 |
SB2025010849 SB2025010851 SB2025010853 and 45 more |
||
| #VU101889 - Improper input validation CVE-2024-11407 |
CWE-20 | Medium | 2.5.20250115-1.el8ap, 2.5.20250115-1.el9ap | 20.12.2024 |
SB2024122036 SB2024122046 SB2024122057 and 10 more |
||
| #VU101828 - Improper Privilege Management CVE-2024-11483 |
CWE-269 | Medium | 2.5.20241218-1.el8ap, 2.5.20241218-1.el9ap | 18.12.2024 |
SB2024121822 SB2024121823 SB2024121824 |
||
| #VU101827 - Security Features CVE-2024-11079 |
CWE-254 | High | 2.5.20241218-1.el8ap, 2.5.20241218-1.el9ap | 18.12.2024 |
SB2024121821 SB2024121823 SB2024121824 and 5 more |
||
| #VU101276 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-53908 |
CWE-89 | High | 2.5.20250115-1.el8ap, 2.5.20250115-1.el9ap | 05.12.2024 |
SB2024120536 SB2024120537 SB2024120538 and 15 more |
||
| #VU101275 - Resource exhaustion CVE-2024-53907 |
CWE-400 | Medium | 2.5.20250115-1.el8ap, 2.5.20250115-1.el9ap | 05.12.2024 |
SB2024120536 SB2024120537 SB2024120538 and 18 more |
||
| #VU100600 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-52304 |
CWE-444 | Medium | 2.5.20250115-1.el8ap, 2.5.20250115-1.el9ap | 19.11.2024 |
SB2024111901 SB2024111916 SB2024111917 and 19 more |
||
| #VU99432 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-10033 |
CWE-79 | Low | 2.5.3-1.el8ap, 2.5.3-1.el9ap | 28.10.2024 |
SB2024102858 SB2024121014 |
||
| #VU96742 - Resource Management Errors CVE-2024-45230 |
CWE-399 | Medium | 2.5.3-1.el8ap, 2.5.3-1.el9ap | 03.09.2024 |
SB2024090362 SB2024090376 SB2024090456 and 19 more |
||
| #VU95442 - Resource exhaustion CVE-2024-41989 |
CWE-400 | High | 2.5.3-1.el8ap, 2.5.3-1.el9ap | 07.08.2024 |
SB2024080722 SB2024080728 SB2024080771 and 14 more |
||
| #VU88883 - Resource exhaustion CVE-2024-22189 |
CWE-400 | Medium | 2.5.3-1.el8ap, 2.5.3-1.el9ap | 22.04.2024 |
SB2024042231 SB2024060420 SB2024062849 and 3 more |