CVE-2019-14905

2 advisories.

PyPI/ansible CVE-2019-14905: medium 5.6

Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible

Action: Upgrade ansible to 2.7.16 or later.

pip install ansible==2.7.16

pip install ansible==2.8.8

pip install ansible==2.9.3

Affected

introduced	fixed	last affected
2.7.0a1	2.7.16	-
2.8.0a1	2.8.8	-
2.9.0a1	2.9.3	-

Fixed versions

2.7.16

2.8.8

2.9.3

Sources

CVE-2019-14905 · published 2021-04-20T16:44:49Z · modified 2024-11-25T05:25:15.851785Z · JSON

PyPI/ansible CVE-2019-14905: unknown

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a fl