Lucene search
+L

2 matches found

OSV
OSV
added 2021/04/07 8:35 p.m.7 views

GHSA-GFR2-QPXH-QJ9M Path Traversal in Ansible

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00492EPSS
SaveExploits1References17
RedHat Linux
RedHat Linux
added 2020/04/22 2:10 p.m.13 views

ansible: path injection on dest parameter in fetch module

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node...

4.6CVSS7.2AI score0.00492EPSS
SaveExploits1References4
Rows per page
Query Builder