Detections
Analytics

SCA: security update for ansibleguy-webui (GHSA-927p-xrc2-x2gj)

high Tenable Self-Hosted Container Security Plugin ID 412951

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - ansibleguy-webui is an open source WebUI for using Ansible. Multiple forms in versions < 0.0.21 allowed
 injection of HTML elements. These are returned to the user after executing job actions and thus evaluated
 by the browser. These issues have been addressed in version 0.0.21 (0.0.21.post2 on pypi). Users are
 advised to upgrade. There are no known workarounds for these issues. (CVE-2024-36110)

See Also

https://github.com/advisories/GHSA-927p-xrc2-x2gj

Plugin Details

Severity: High

ID: 412951

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

Percentile: 57.02

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 8

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:P/A:P

CVSS Score Source: CVE-2024-36110

CVSS v3

Risk Factor: High

Base Score: 8.2

Temporal Score: 7.1

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 5/28/2024

Vulnerability Publication Date: 5/28/2024

Reference Information

CVE: CVE-2024-36110

cwe: CWE-79