CVE-2025-5988 — Aap-gateway: csrf origin checking is disabled
A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests from the gateway to external components, such as the contr…
Published: 2025-08-04 · CVSS: 5.3 · CVSS 3.1
A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests from the gateway to external components, such as the controller, hub, and eda.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7