Lucene search
+L

4 matches found

OSV
OSV
added 2021/04/20 4:43 p.m.19 views

GHSA-893H-35V4-MXQX Path Traversal in Ansible

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive...

8.5CVSS6.8AI score0.00365EPSS
SaveExploits0References14
Rows per page
Query Builder