| ID | CVE-2023-5189 | ||||||
| Sažetak | A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N | ||||||
| Zadnje važnije ažuriranje | 06-12-2024 - 11:15 | ||||||
| Objavljeno | 14-11-2023 - 23:15 |
