Security update 5.2.1 for Multi-Linux Manager Client Tools
Description
The `xmlattr` filter in affected versions of Jinja accepts keys containing spaces. XML/HTML attributes cannot contain spaces, as each would then be interpreted as a separate attribute. If an application accepts keys (as opposed to only values) as user input, and renders these in pages that other users see as well, an attacker could use this to inject other attributes and perform XSS. Note that accepting keys as user input is not common or a particularly intended use case of the `xmlattr` filter, and an application doing so should already be verifying what keys are provided regardless of this fix.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The python-jinja2 package, a Python template engine used in Red Hat OpenStack Platform 17.1 and Red Hat Enterprise Linux 9, contains an HTML attribute injection vulnerability (CVE-2024-22195). This occurs when user-supplied input is passed as keys to the xmlattr filter, potentially allowing injection of malicious HTML attributes. Red Hat has issued security advisories RHSA-2024:2348 and RHSA-2024:2733 providing updated packages that fix this vulnerability. The fix requires updating the python-jinja2 package and restarting all applications that use Jinja2 templates to apply the patch.
Potential Impact
The vulnerability allows HTML attribute injection via user input in Jinja2 templates, which could lead to injection of malicious attributes in rendered HTML. This may impact applications using Jinja2 for templating by enabling injection attacks that could affect the integrity of rendered content. The severity is rated moderate by Red Hat. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated python-jinja2 packages that fix CVE-2024-22195. Users should apply the security updates provided in Red Hat Enterprise Linux 9 and Red Hat OpenStack Platform 17.1 as described in advisories RHSA-2024:2348 and RHSA-2024:2733. After applying the update, all applications using Jinja2 must be restarted for the fix to take effect. Refer to https://access.redhat.com/articles/11258 for detailed update instructions.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:2733
- Cve Count
- 1
- State
- PUBLISHED
Threat ID: 6a1f4ea3e29bf47b500889d0
Added to database: 06/02/2026, 21:44:03 UTC
Last enriched: 08/16/2026, 18:47:04 UTC
Last updated: 10/10/2026, 06:48:09 UTC
Views: 120
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.