Lucene search

K
osvGoogleOSV:GHSA-3XVG-X47J-X75W
HistoryMay 13, 2022 - 1:07 a.m.

Ansible Improper Input Validation vulnerability

2022-05-1301:07:34
Google
osv.dev
10
ansible
input validation
ad-hoc command
arbitrary code
software

EPSS

0.001

Percentile

32.4%

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker’s control, allowing to run arbitrary code as a result.