Vulnerability CVE-2023-3971
Published: 2023-10-04

Description:
An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.

 References:
https://access.redhat.com/errata/RHSA-2023:4340
https://access.redhat.com/security/cve/CVE-2023-3971
https://access.redhat.com/errata/RHSA-2023:4590
https://bugzilla.redhat.com/show_bug.cgi?id=2226965
Copyright 2026, cxsecurity.com

 

Back to Top