https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:05:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274101 EUVD-2026-274101 https://cve.radiocsirt.org/vuln/euvd-2026-274101 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9908 <p>A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers (such as X-Trusted-Proxy and X-Envoy-*) and event stream URLs via crafted requests and job templates. By exfiltrating these headers, an attacker could spoof trusted requests, escalate privileges, or perform malicious event injection.</p> <p>A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers (such as X-Trusted-Proxy and X-Envoy-*) and event stream URLs via crafted requests and job templates. By exfiltrating these headers, an attacker could spoof trusted requests, escalate privileges, or perform malicious event injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-9908 https://cve.radiocsirt.org/vuln/ghsa-c2g3-cfch-p5h4 <p>A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers (such as X-Trusted-Proxy and X-Envoy-*) and event stream URLs via crafted requests and job templates. By exfiltrating these headers, an attacker could spoof trusted requests, escalate privileges, or perform malicious event injection.</p> <p>A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers (such as X-Trusted-Proxy and X-Envoy-*) and event stream URLs via crafted requests and job templates. By exfiltrating these headers, an attacker could spoof trusted requests, escalate privileges, or perform malicious event injection.</p> https://cve.radiocsirt.org/vuln/ghsa-c2g3-cfch-p5h4 https://cve.radiocsirt.org/vuln/rhsa-2025:19201 <p>event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA event-driven-ansible: Sensitive Internal Headers Disclosure in AAP EDA Event Streams tar-fs: tar-fs symlink validation bypass django: Potential partial directory-traversal via archive.extract()</p> <p>event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA event-driven-ansible: Sensitive Internal Headers Disclosure in AAP EDA Event Streams tar-fs: tar-fs symlink validation bypass django: Potential partial directory-traversal via archive.extract()</p> https://cve.radiocsirt.org/vuln/rhsa-2025:19201 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2432 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um Dateien zu manipulieren, offenzulegen oder Privilegien zu eskalieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um Dateien zu manipulieren, offenzulegen oder Privilegien zu eskalieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2432