| Package | Affected versions | Patched versions |
|---|---|---|
| ansible | < 1.5.4 | 1.5.4 |
| ansible | < 1.5.4 | 1.5.4 |
The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free