| Package | Affected versions | Patched versions |
|---|---|---|
| ansible | < 8.5.0 | 8.5.0 |
| ansible automation platform | = 1.2= 2.3= 2.4 | |
| ansible developer | = 1.0= 1.1 | |
| ansible inside | = 1.1= 1.2 |
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free