← All credits

Red Hat would like to thank Martin Brodeur (FluentLogic) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential

YAML safe_load production fallback to unsafe_load enables RCE via deserialization