CVE-2023-5115 — Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role.…
Published: 2023-12-18 · CVSS: 6.3 · CVSS 3.1
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7