Loading story…
A moderate cross-site scripting vulnerability, CVE-2024-34064, affects Jinja2's xmlattr filter when applications pass unvalidated, user-controlled keys into the filter. Keys containing invalid HTML or XML attribute characters can inject additional attributes into rendered output, potentially allowing attacker-controlled script execution when another user views the affected page. Red Hat assigned the flaw a CVSS v3.1 score of 5.4 and noted that the preceding fix for CVE-2024-22195 blocked spaces but did not address other dangerous characters.
The issue is an instance of CWE-79, improper neutralization of input during web-page generation. Organizations should apply vendor fixes, prevent untrusted input from being used as xmlattr keys, validate inputs against strict allowlists, and use context-appropriate output encoding. Successful XSS exploitation can enable session-cookie theft, account takeover, unauthorized actions, and exposure of sensitive data; HttpOnly cookies and web application firewalls provide additional defense in depth.
See affected versions and whether adversaries are exploiting it.
7 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued RHSA-2024:4522 to fix affected Automation Controller components in Ansible Automation Platform 2.4.
Red Hat issued RHSA-2024:4231 to fix python-jinja2 in Red Hat Enterprise Linux 8.
Red Hat fixed the Red Hat Developer Hub 1.2 on RHEL 9 image through advisory RHEA-2024:4071.
Red Hat issued RHSA-2024:3795 to remediate CVE-2024-34064 in fence-agents for RHEL 8.4 Advanced Update Support and related SAP, telecommunications, and extended-life-cycle offerings. Updated fence-agents 4.2.1-65.el8_4.15 packages were provided for x86_64 and ppc64le.
Red Hat issued RHSA-2024:3781 to fix python3x-jinja2 in Ansible Automation Platform 2.4 for RHEL 8 and python-jinja2 for RHEL 9.
Red Hat issued RHSA-2024:5810 and RHSA-2024:6011 to fix affected Ironic content in OpenShift Container Platform versions 4.12 and 4.13, respectively.
Red Hat fixed the affected fence-agents package on RHEL 8 through RHBA-2024:4238 for CVE-2024-34064, an XSS issue in Jinja2's xmlattr filter.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
4 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceredhat.com
Open sourceaccess.redhat.com
Open sourcecwe.mitre.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released updated OpenShift Container Platform images and packages for versions **4.13.49** and **4.15.25** to remediate **CVE-2024-34064**, a moderate-severity Jinja2 attribute-injection flaw. The issue affects the `xmlattr` filter when an application passes attacker-controlled dictionary keys: keys containing spaces, `/`, `>`, or `=` can be interpreted as additional HTML or XML attributes, potentially enabling cross-site scripting (XSS) against users viewing the rendered page. The flaw was not fully addressed by the prior fix for CVE-2024-22195, which blocked spaces but not other unsafe characters. Jinja **3.1.4** fixes CVE-2024-34064, although applications should not pass unvalidated user-controlled keys to `xmlattr` regardless of version; user-controlled values remain safe. Red Hat advised OpenShift 4.13 and 4.15 customers across RHEL 8 and RHEL 9 architectures to upgrade through their applicable release channels using the OpenShift CLI or web console.
Aug 27, 2026
A vulnerability tracked as **CVE-2026-44990** allows stored cross-site scripting in `sanitize-html` when applications use the library’s default configuration and later render sanitized user content as trusted HTML. The flaw affects versions prior to **2.17.4** and stems from the handling of the disallowed `xmp` element: because `htmlparser2` treats `xmp` as a raw-text tag, attacker-supplied markup inside it is preserved as text during sanitization but can be emitted back as active HTML or JavaScript under the default `disallowedTagsMode: 'discard'` behavior. GitHub’s advisory and the upstream patch say the bypass can let payloads such as `<script>`, `img` event handlers, and `svg`-embedded script content survive filtering and execute in a victim’s browser. The fix in **2.17.4** adds `xmp` to `nonTextTags` so content inside a disallowed `xmp` tag is dropped instead of re-emitted, and regression tests were added to confirm the malicious content is removed. The issue was reported by **Vincenzo Turturro** (`sushi-gif`), and users of affected `sanitize-html` deployments, including those in **ApostropheCMS**, were urged to update immediately.
Jun 29, 2026
A critical **server-side template injection** flaw tracked as `CVE-2026-54390` affects **JTL Shop** versions **5.2.0 through 5.7.1**, where unsanitized user input is passed to the **Smarty** template engine. The vulnerability allows **unauthenticated remote attackers** to inject malicious template syntax and access sensitive server-side information, including **database credentials** and **encryption keys**. On **JTL Shop 5.4.0 through 5.7.1**, the flaw can be escalated to **remote code execution** by abusing registered Smarty modifiers such as `unserialize` and `file_get_contents` to write a **webshell** into the web root and run arbitrary commands as the web server user. The issue has been rated **critical** with **CVSS 3.1 9.8** and **CVSS 4.0 9.3**, and affected organizations are advised to upgrade to **JTL Shop 5.7.2 or later** and ensure user input reaching the template engine is properly sanitized.
Jun 29, 2026