CVE-2025-23196

A code injection vulnerability exists in the Ambari Alert Definition feature in Apache Ambari versions prior to 2.7.9 . The flaw occurs because the script filename field is executed using sh -c when defining alert scripts, allowing authenticated users to inject and execute arbitrary shell command...