Lucene search

K
osvGoogleOSV:PYSEC-2020-7
HistoryMar 16, 2020 - 4:15 p.m.

PYSEC-2020-7

2020-03-1616:15:00
Google
osv.dev
11

0.001 Low

EPSS

Percentile

30.2%

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable.