Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:ansible_developer:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductAnsible Developer (78290d9c-e32b-5d4f-9965-f205974cd81b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5115 vulnerable 2026-06-08 06:19:42.491420 Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files
MEDIUM (6.3)
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Published: 2023-12-18T13:43:07.791Z
Updated: 2025-11-20T17:29:54.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3971 vulnerable 2026-06-08 06:09:40.919716 Controller: html injection in custom login info
HIGH (7.3)
An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.
Published: 2023-10-04T14:26:01.621Z
Updated: 2025-11-20T19:51:46.690Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.