Lucene search
+L

9 matches found

RedHat Linux
RedHat Linux
•added 2026/08/24 4:39 p.m.•11 views

awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS6.6AI score0.01722EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/08/24 4:36 p.m.•14 views

awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS6.6AI score0.01722EPSS
SaveExploits0References4
NVD
NVD
•added 2026/08/24 4:17 p.m.•13 views

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS0.01722EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/08/24 3:22 p.m.•11 views

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS6.6AI score0.01722EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/24 3:21 p.m.•39 views

CVE-2026-71364

A path traversal vulnerability in AWX 's project_archive action plugin (part of Red Hat Ansible Automation Platform ) allows arbitrary file writes on the execution node. The plugin extracts zip/tar members by joining the project directory path with the member filename without path normalization o...

7.2CVSS6.6AI score0.01722EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/24 3:21 p.m.•13 views

EUVD-2026-64918

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS6.7AI score0.01722EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/24 3:21 p.m.•42 views

CVE-2026-71364 Awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS0.01722EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/24 3:21 p.m.•6 views

CVE-2026-71364 Awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS6.5AI score0.01722EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•1 views

CVE-2026-71364: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS6.3AI score0.01722EPSS
SaveExploits0References2
Rows per page
Query Builder