Lucene search
+L

15052 matches found

NVD
NVD
added 2023/12/12 10:15 p.m.18 views

CVE-2023-5764

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.8CVSS0.00544EPSS
SaveExploits0References5
Prion
Prion
added 2023/12/12 10:15 p.m.22 views

Code injection

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce code injection when supplying templating data...

4.3CVSS7.2AI score0.00544EPSS
SaveExploits0References4Affected Software6
UbuntuCve
UbuntuCve
added 2023/12/12 10:15 p.m.49 views

CVE-2023-5764

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.8CVSS6.8AI score0.00544EPSS
SaveExploits0References6
OSV
OSV
added 2023/12/12 10:15 p.m.8 views

UBUNTU-CVE-2023-5764

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.8CVSS6.9AI score0.00544EPSS
SaveExploits0References7
CVE
CVE
added 2023/12/12 10:01 p.m.182 views

CVE-2023-5764

CVE-2023-5764 describes a template-injection flaw in Ansible where the controller’s internal templating can drop the unsafe designation from template data, enabling a crafted file to inject templates during templating data provisioning. This affects Ansible’s templating operations and could allow...

7.8CVSS7.1AI score0.00544EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/12 10:01 p.m.19 views

CVE-2023-5764 Ansible: template injection

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.1CVSS6.8AI score0.00544EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/12 10:01 p.m.8 views

CVE-2023-5764 Ansible: template injection

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.1CVSS6.8AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2023/12/12 10:01 p.m.32 views

CVE-2023-5764

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.8CVSS7.3AI score0.00544EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/12/12 10:01 p.m.28 views

CVE-2023-5764 Ansible: template injection

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data...

7.1CVSS7.8AI score0.00544EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/12/12 5:30 p.m.11 views

golang: html/template: improper handling of HTML-like comments within script contexts

A flaw was found in Golang. The html/template package did not properly handle HMTL-like "" comment tokens, nor hashbang "!" comment tokens, in contexts. This issue may cause the template parser to improperly interpret the contents of contexts, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00938EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2023/12/12 5:30 p.m.11 views

golang: html/template: improper handling of special tags within script contexts

A flaw was found in Golang. The html/template package did not apply the proper rules for handling occurrences of " contexts. This issue may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00918EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2023/12/12 5:29 p.m.12 views

golang: html/template: improper handling of special tags within script contexts

A flaw was found in Golang. The html/template package did not apply the proper rules for handling occurrences of " contexts. This issue may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00918EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2023/12/12 5:29 p.m.44 views

Moderate: Red Hat Security Advisory: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS6.7AI score0.01588EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2023/12/12 5:29 p.m.12 views

golang: html/template: improper handling of HTML-like comments within script contexts

A flaw was found in Golang. The html/template package did not properly handle HMTL-like "" comment tokens, nor hashbang "!" comment tokens, in contexts. This issue may cause the template parser to improperly interpret the contents of contexts, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00938EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2023/12/12 5:25 p.m.11 views

golang: html/template: improper handling of special tags within script contexts

A flaw was found in Golang. The html/template package did not apply the proper rules for handling occurrences of " contexts. This issue may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00918EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2023/12/12 5:25 p.m.14 views

golang: html/template: improper handling of HTML-like comments within script contexts

A flaw was found in Golang. The html/template package did not properly handle HMTL-like "" comment tokens, nor hashbang "!" comment tokens, in contexts. This issue may cause the template parser to improperly interpret the contents of contexts, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00938EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2023/12/12 5:24 p.m.14 views

golang: html/template: improper handling of HTML-like comments within script contexts

A flaw was found in Golang. The html/template package did not properly handle HMTL-like "" comment tokens, nor hashbang "!" comment tokens, in contexts. This issue may cause the template parser to improperly interpret the contents of contexts, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00938EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2023/12/12 5:24 p.m.10 views

golang: html/template: improper handling of special tags within script contexts

A flaw was found in Golang. The html/template package did not apply the proper rules for handling occurrences of " contexts. This issue may cause the template parser to improperly consider script contexts to be terminated early, causing actions to be improperly escaped...

6.1CVSS6.7AI score0.00918EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2023/12/12 6:30 a.m.35 views

Jinja2 template injection in mlflow

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

10CVSS6.8AI score0.00937EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2023/12/12 6:30 a.m.39 views

GHSA-CXFR-5Q3R-2RC2 Jinja2 template injection in mlflow

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

8.8CVSS5.9AI score0.00937EPSS
SaveExploits1References5
Rows per page
Query Builder