PyPI/ansible CVE-2021-3583: unknown, EPSS 0.90%
A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line
Action: Upgrade ansible to 2.9.23 or later.
pip install ansible==2.9.23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.23 | - |
Fixed versions
| 2.9.23 |
Sources
- osv: PYSEC-2021-358
- https://bugzilla.redhat.com/show_bug.cgi?id=1968412
- https://github.com/advisories/GHSA-2pfh-q76x-gwvm
CVE-2021-3583 · published · modified · JSON