CRITICAL🇵🇱 Wersja polska

CVE-2017-7481

CVSS 9.8v3.1pub. 2018-07-19upd. 2024-11-21

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Canonical Ubuntu

    OS
    Canonical
    16.0418.0419.04

  • Debian

    OS
    Debian
    9.0

  • Red Hat Ansible Engine

    APP
    Redhat
    2.3.2.0 – 2.4.0.0 (excl.)< 2.3.1.0

  • Red Hat Enterprise Linux

    OS
    Redhat
    7.0

  • Red Hat Gluster Storage

    APP
    Redhat
    3.2

  • Red Hat OpenShift Container Platform

    APP
    Redhat
    3.33.43.5

  • Red Hat Openstack

    APP
    Redhat
    1011

  • Red Hat Storage Console

    APP
    Redhat
    2.0

  • Red Hat Virtualization

    APP
    Redhat
    4.1

  • Red Hat Virtualization Manager

    APP
    Redhat
    4.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓same product

GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-49113CRITICAL9.9⚠ KEVPL ✓same product

RCE przez deserializację PHP w Roundcube Webmail (parametr _from)

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓same product

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2025-24201CRITICAL10.0⚠ KEVPL ✓same product

Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki