Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:00:59 +0000 BREW-ansible-CVE-2023-5115 — Ansible symlink attack vulnerability https://cve.radiocsirt.org/vuln/brew-ansible-cve-2023-5115 <p><strong>Affected:</strong> Homebrew: ansible</p> <p>An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.</p> <p><strong>Affected:</strong> Homebrew: ansible</p> <p>An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.</p> https://cve.radiocsirt.org/vuln/brew-ansible-cve-2023-5115 CVE-2023-5115 — Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files https://cve.radiocsirt.org/vuln/cve-2023-5115 <p><strong>Affected:</strong> Red Hat Ansible Automation Platform 2.3 for RHEL 8, Red Hat Ansible Automation Platform 2.3 for RHEL 9, Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9, Red Hat Ansible Automation Platform 1.2</p> <p>An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.</p> <p><strong>Affected:</strong> Red Hat Ansible Automation Platform 2.3 for RHEL 8, Red Hat Ansible Automation Platform 2.3 for RHEL 9, Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9, Red Hat Ansible Automation Platform 1.2</p> <p>An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.</p> https://cve.radiocsirt.org/vuln/cve-2023-5115 GHSA-jpvw-p8pr-9g2x — Ansible symlink attack vulnerability https://cve.radiocsirt.org/vuln/ghsa-jpvw-p8pr-9g2x <p><strong>Affected:</strong> PyPI: ansible</p> <p>An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.</p> <p><strong>Affected:</strong> PyPI: ansible</p> <p>An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.</p> https://cve.radiocsirt.org/vuln/ghsa-jpvw-p8pr-9g2x