CVE-2023-39059
1 advisory.
Go/github.com/ansible-semaphore/semaphore CVE-2023-39059: high 8.8
Code injection in ansible semaphore
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.8.90 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3r32-cp7v-5wq4
- https://nvd.nist.gov/vuln/detail/CVE-2023-39059
- https://gist.github.com/Alevsk/1757da24c5fb8db735d392fd4146ca3a
- https://github.com/ansible-semaphore/semaphore
- https://www.alevsk.com/2023/07/a-quick-story-of-security-pitfalls-with-execcommand-in-software-integrations
CVE-2023-39059 · published · modified · JSON