Ansible vulnerabilities

2 known vulnerabilities in Ansible from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Red Hat Ansible Automation Platform 2.4 for…: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2023-5764Dec 12, 2023Red Hat

  A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection w

• 7.5 High severity

  ansible, ansible community.aws, ansible…: Improper Handling of Parameters

  CVE-2022-3697Oct 28, 2022Ansible, Ansible Community.aws, Ansible Amazon.aws

  A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading t