Описание
A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ansible Automation Platform 1.2 | ansible | Affected | ||
| Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-core | Fixed | RHSA-2023:7773 | 13.12.2023 |
| Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-core | Fixed | RHSA-2023:7773 | 13.12.2023 |
| Red Hat Ansible Automation Platform 2.4 for RHEL 8 | ansible-core | Fixed | RHSA-2023:7773 | 13.12.2023 |
| Red Hat Ansible Automation Platform 2.4 for RHEL 9 | ansible-core | Fixed | RHSA-2023:7773 | 13.12.2023 |
| Red Hat Ansible Automation Platform 2.4 for RHEL 9 | ansible-core | Fixed | RHSA-2023:7773 | 13.12.2023 |
| Red Hat Ansible Automation Platform 2.4 for RHEL 9 | ansible-core | Fixed | RHSA-2023:7773 | 13.12.2023 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.1 High
CVSS3
Связанные уязвимости
A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.
A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.
A template injection flaw was found in Ansible where a user's controll ...
EPSS
7.1 High
CVSS3