Lucene search
+L

5 matches found

RedHat Linux
RedHat Linux
added 2026/09/23 9:13 p.m.4 views

automation-controller: automation-controller: incomplete sanitize_jinja() regex allows Jinja template injection into ad-hoc module_args, Machine-credential fields, and Host names, reaching ansible-core templating in the execution environment

A flaw was found in the automation-controller input-validation guard sanitizejinja. The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '' or '%' character, so a Jinja expression containing an inner brace for example an empty dict i...

7.1CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/23 7:40 p.m.11 views

CVE-2026-84714 Automation-controller: automation-controller: incomplete sanitize_jinja() regex allows jinja template injection into ad-hoc module_args, machine-credential fields, and host names, reaching ansible-core templating in the execution environment

A flaw was found in the automation-controller input-validation guard sanitizejinja. The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '' or '%' character, so a Jinja expression containing an inner brace for example an empty dict i...

7.1CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/23 7:40 p.m.2 views

EUVD-2026-85605

A flaw was found in the automation-controller input-validation guard sanitizejinja. The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '' or '%' character, so a Jinja expression containing an inner brace for example an empty dict i...

7.1CVSS5.9AI score
SaveExploits0References3
CVE
CVE
added 2026/09/23 7:40 p.m.7 views

CVE-2026-84714

A flaw was found in the automation-controller input-validation guard sanitizejinja. The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '' or '%' character, so a Jinja expression containing an inner brace for example an empty dict i...

7.1CVSS5.9AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/23 7:15 p.m.3 views

CVE-2026-84714

A flaw was found in the automation-controller input-validation guard sanitizejinja. The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '' or '%' character, so a Jinja expression containing an inner brace for example an empty dict i...

7.1CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder