CVE-2025-23196

CVE-2025-23196 describes a code injection vulnerability in the Ambari Alert Definition feature. An authenticated user can exploit the vulnerability when defining alert scripts, where the script filename field is executed via sh -c , enabling remote command execution on the server. Multiple connec...

CVE-2025-23196

creationtimestamp| type| source ---|---|--- 2025-01-21 21:17:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lgbro6z44u2n 2025-01-21 22:01:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2501 2025-01-21 22:16:00+00:00| seen|...