A flaw was found in Ansible where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

...

GHSA-M8WH-MQGF-RR8G Code injection in Kubernetes Java Client

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25738

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25738

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

Remote code execution

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution...

CVE-2021-25738

CVE-2021-25738: The vulnerability arises from loading specially crafted YAML via the Kubernetes Java Client library, enabling code execution. Connected documents consistently describe this YAML-loading path as the root cause and code execution outcome. The public data does not provide precise aff...

CVE-2021-42139

Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations...

CVE-2021-42139

Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations...

CVE-2021-42139

Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations...

Code injection

Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations...

CVE-2021-42139

Deno Standard Modules before 0.107.0 allows Code Injection via an untrusted YAML file in certain configurations...

CVE-2021-42139

The CVE-2021-42139 issue affects Deno Standard Modules prior to 0.107.0, where code execution can be injected via an untrusted YAML file in certain configurations. Affected component: Deno Standard Modules (before 0.107.0). Root cause: insecure handling of YAML input leading to code injection. Im...

PT-2021-16765 · Unknown · Kubernetes Java Client Libraries

Name of the Vulnerable Software and Affected Versions: Kubernetes Java Client library affected versions not specified Description: Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution. Recommendations: At the moment, there is no information about a new...

Deno 代码注入漏洞

Deno is open source a simple , modern and secure JavaScript and TypeScript runtime environment . It uses V8 and is built with Rust. A code injection vulnerability exists in Deno versions prior to 0.107.0, which stems from allowing code injection via untrusted YAML files in certain configurations...

Google SLO-Generator 2.0.0 - Code Execution Vulnerability

Exploit Title: Google SLO-Generator 2.0.0 - Code Execution Exploit Author: Kiran Ghimire Software Link: https://github.com/google/slo-generator/releases Version: = 2.0.0 Tested on: Linux CVE: CVE-2021-22557 Introduction: Is a tool to compute and export Service Level Objectives SLOs, Error Budgets...

Google SLO-Generator 2.0.0 Code Execution

Exploit Title: Google SLO-Generator 2.0.0 - Code Execution Date: 2021-09-28 Exploit Author: Kiran Ghimire Software Link: https://github.com/google/slo-generator/releases Version: = 2.0.0 Tested on: Linux CVE: CVE-2021-22557 Introduction: Is a tool to compute and export Service Level Objectives...

Google SLO-Generator 2.0.0 - Code Execution

Exploit Title: Google SLO-Generator 2.0.0 - Code Execution Date: 2021-09-28 Exploit Author: Kiran Ghimire Software Link: https://github.com/google/slo-generator/releases Version: = 2.0.0 Tested on: Linux CVE: CVE-2021-22557 Introduction: Is a tool to compute and export Service Level Objectives...

GHSA-J28R-J54M-GPC4 Code Injection in SLO Generator

SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173...

Code Injection in SLO Generator

SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173...

Remote Code Execution (RCE)

slogenerator is vulnerable to remote code execution. An attacker may exploit the vulnerability by injecting a maliciously crafted YAML file in a specific format .yml...