https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:31:22.432527+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-39044 cnvd-2021-39044 2026-10-08T22:31:22.439029+00:00 cnvd-2021-39044 https://cve.radiocsirt.org/vuln/euvd-2026-42318 EUVD-2026-42318 2026-10-08T22:31:22.439076+00:00 EUVD-2026-42318 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14329 fkie_cve-2020-14329 2026-10-08T22:31:22.439100+00:00

A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint. This flaw allows users from other organizations in the system to retrieve any label from the organization and also disclose organization names. The highest threat from this vulnerability is to confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-c7r9-mwvj-rr98 GHSA-c7r9-mwvj-rr98 2026-10-08T22:31:22.439154+00:00

A data exposure flaw was found in Ansible Tower in versions before 3.7.2, where sensitive data can be exposed from the /api/v2/labels/ endpoint. This flaw allows users from other organizations in the system to retrieve any label from the organization and also disclose organization names. The highest threat from this vulnerability is to confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2020-14329 gsd-2020-14329 2026-10-08T22:31:22.439183+00:00 gsd-2020-14329 https://cve.radiocsirt.org/vuln/rhsa-2020:3328 RHSA-2020:3328 — Red Hat Security Advisory: Red Hat Ansible Tower 3.7.2-1 - RHEL7 Container 2026-10-08T22:31:22.439203+00:00

Tower: SSRF: Server Side Request Forgery on Credential Tower: SSRF: Server Side Request Forgery on webhooks Tower: Sensitive Data Exposure on Label Tower: Named URLs allow for testing the presence or absence of objects