Approved changes feed: RSS · Atom

cpe:2.3:a:ansible-semaphore:ansible_semaphore:2.8.90:*:*:*:*:ansible:*:*

part: a version: 2.8.90 update: *

VendorAnsible Semaphore (42110578-2909-50e2-9697-9bd48bf97b4b)
ProductAnsible Semaphore (33a56854-2c08-5123-bcc7-23254dbcb3cb)
Edition*
Language*
Software edition*
Target softwareansible
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ansible-semaphore/semaphore purl2cpe 2026-06-01 10:18:02.811735
pkg:golang/github.com/ansible-semaphore/semaphore purl2cpe 2026-06-01 10:18:02.811737

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39059 vulnerable 2026-06-08 06:09:35.725013 Details available
An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.
Published: 2023-08-28T00:00:00.000Z
Updated: 2024-10-02T16:03:51.154Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.