Ansible Platform UI contains a DOM‑based cross‑site scripting flaw that arises from the unvalidated 'next' query parameter used for redirects. The parameter is inserted directly into window.location.href, bypassing the platform’s built‑in URL sanitization such as checks for javascript: or data: schemes. When an authenticated user navigates to a crafted link, malicious JavaScript executes in the context of that user’s session, enabling credential theft or arbitrary code execution.

The flaw affects Red Hat Ansible Automation Platform 2 and associated deployments that include the UI, such as Red Hat Hardened Images. The advisory does not list specific patch versions, but all installations of the affected platform component are potentially vulnerable.

The vulnerability has a CVSS score of 5.4, indicating moderate severity. Exploitation is performed via the web interface by delivering a malicious link that a logged‑in user opens; no additional privileges or local access are required. The EPSS score is unavailable, and the flaw is not listed in CISA KEV, suggesting limited widespread exploitation at present, though an authenticated user’s session can be compromised if the malicious link is clicked.