2 matches found
CVE-2023-28609
api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.
CVE-2023-39059
An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.