CVE-2025-23196

A code injection vulnerability exists in the Apache Ambari Alert Definition feature, affecting versions prior to 2.7.9 . The flaw occurs because the script filename field is executed using sh -c when defining alert scripts. An authenticated user can exploit this to inject and execute arbitrary sh...