| Package | Affected versions | Patched versions |
|---|---|---|
| ansible-core | ≥ 2.15.0, < 2.15.8≥ 2.16.0, < 2.16.1< 2.14.12 | 2.15.82.16.12.14.12 |
| extra packages for enterprise linux | = 8.0 | |
| ansible | = 2.16.0≥ 2.15.0, < 2.15.7< 2.14.12 | 2.15.72.14.12 |
| ansible automation platform | = 2.4 | |
| ansible developer | = 1.1 | |
| ansible inside | = 1.2 |
A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free