Lucene search

K
osvGoogleOSV:PYSEC-2020-2
HistoryApr 30, 2020 - 5:15 p.m.

PYSEC-2020-2

2020-04-3017:15:00
Google
osv.dev
11

0.0004 Low

EPSS

Percentile

9.9%

An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.