PYSEC-2022-253

🗓️ 24 Aug 2022 16:00:15Reported by GoogleType

osv🔗 osv.dev👁 16 Views

A flaw in ansible-runner allows execution of host's shell comman

Reporter	Title	Published	Views	Family All 18
CVE	CVE-2021-4041	24 Aug 202216:15	–	cve
NVD	CVE-2021-4041	24 Aug 202216:15	–	nvd
Veracode	Cross-site Scripting (XSS)	14 Jan 202206:00	–	veracode
Cvelist	CVE-2021-4041	24 Aug 202215:11	–	cvelist
RedhatCVE	CVE-2021-4041	2 Dec 202112:06	–	redhatcve
Github Security Blog	ansible-runner vulnerable to shell command injection	25 Aug 202200:00	–	github
Debian CVE	CVE-2021-4041	24 Aug 202216:15	–	debiancve
UbuntuCve	CVE-2021-4041	24 Aug 202200:00	–	ubuntucve
OSV	CVE-2021-4041	24 Aug 202216:15	–	osv
OSV	Red Hat Security Advisory: ansible-runner security and bug fix update	16 Sep 202407:00	–	osv

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2021-4041
github	www.github.com/ansible/ansible-runner/commit/3533f265f4349a3f2a0283158cd01b59a6bbc7bd
github	www.github.com/advisories/GHSA-6j58-grhv-2769

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Aug 2022 16:15Current

2.8Low risk

Vulners AI Score2.8

CVSS37.8

EPSS0.001