Redhat: >> Ansible Automation Platform >> 2.3 Security Vulnerabilities
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
CVSS Score
6.3
EPSS Score
0.002
Published
2023-12-18
An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.
CVSS Score
7.3
EPSS Score
0.006
Published
2023-10-04