Lucene search
+L

26 matches found

Vulnrichment
Vulnrichment
added 2024/11/11 11:32 p.m.14 views

CVE-2024-11079 Ansible-core: unsafe tagging bypass via hostvars object in ansible-core

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playboo...

5.5CVSS7.8AI score0.00499EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/11/11 11:32 p.m.28 views

CVE-2024-11079 Ansible-core: unsafe tagging bypass via hostvars object in ansible-core

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playboo...

5.5CVSS0.00499EPSS
SaveExploits0References4
CVE
CVE
added 2024/11/11 11:32 p.m.331 views

CVE-2024-11079

CVE-2024-11079 : In Ansible-Core, a bypass of unsafe-content protections via the hostvars object can lead to arbitrary code execution if templating data from remote sources or module outputs is unsafe. The description explicitly states the risk of executing templated content when hostvars is used...

5.5CVSS6.2AI score0.00499EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2024/11/11 11:32 p.m.17 views

CVE-2024-11079

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playboo...

5.5CVSS7.4AI score0.00499EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.13 views

PT-2024-16742

Name of the Vulnerable Software and Affected Versions Ansible-Core versions 2.x Description A flaw was found in Ansible-Core, allowing attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code executi...

5.5CVSS7.8AI score0.00499EPSS
SaveExploits0References62
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.6 views

Red Hat Ansible 输入验证错误漏洞

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to distribute, manage, and program computer systems. An input validation error vulnerability exists in Red Hat Ansible that stems from the use of the hostvars object to reference...

5.5CVSS6.7AI score0.00499EPSS
SaveExploits0References2
Rows per page
Query Builder