CVE-2025-23196

A code injection vulnerability exists in the Ambari Alert Definition feature in Apache Ambari versions prior to 2.7.9 . The flaw occurs because the script filename field is executed using sh -c when defining alert scripts, allowing authenticated users to inject and execute arbitrary shell command...

CVE-2025-23196

creationtimestamp| type| source ---|---|--- 2025-01-21 21:17:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lgbro6z44u2n 2025-01-21 22:01:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2501 2025-01-21 22:16:00+00:00| seen|...