{"action":"Upgrade ansible to 2.7.17 or later.","affected":[{"fixed":"2.8.9","introduced":"2.8.0a1"},{"fixed":"2.9.6","introduced":"2.9.0a1"},{"fixed":"2.7.17","introduced":"0"}],"component":"ansible","cve_ids":["CVE-2020-1737"],"ecosystem":"PyPI","epss":0.00365,"exploited":false,"fixed_versions":["2.8.9","2.9.6","2.7.17"],"ghsa_id":"GHSA-893h-35v4-mxqx","id":"tcs_01M5KF7QBTKQNYWSN5HDBAZVMY","modified_at":"2024-09-06T18:20:29.504213Z","published_at":"2021-04-20T16:43:33Z","references":["https://osv.dev/vulnerability/GHSA-893h-35v4-mxqx","https://nvd.nist.gov/vuln/detail/CVE-2020-1737","https://github.com/ansible/ansible/issues/67795","https://github.com/ansible/ansible/pull/67799","https://github.com/samdoran/ansible/commit/1de638b4d38d6d916588e2ad48d01f90dab8c36d","https://github.com/samdoran/ansible/commit/aaf549d7870b8687209a3282841b59207735b676","https://github.com/samdoran/ansible/commit/b60aa26e2313a8d52c0e0d3fd01696e797605b72","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1737","https://github.com/advisories/GHSA-893h-35v4-mxqx","https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2020-9.yaml","https://github.com/samdoran/ansible","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWDK3QUVBULS3Q3PQTGEKUQYPSNOU5M3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QT27K5ZRGDPCH7GT3DRI3LO4IVDVQUB7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3IMV3XEIUXL6S4KPLYYM4TVJQ2VNEP2","https://security.gentoo.org/glsa/202006-11"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-893h-35v4-mxqx","url":"https://osv.dev/vulnerability/GHSA-893h-35v4-mxqx"}],"summary":"Path Traversal in Ansible"}