CVE-2023-3971 Information

Description

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML resulting in a complete compromise.

Reference

https://access.redhat.com/errata/RHSA-2023:4340 https://access.redhat.com/security/cve/CVE-2023-3971 https://access.redhat.com/errata/RHSA-2023:4590 https://bugzilla.redhat.com/show_bug.cgi?id=2226965