CVE-2024-11079

CVSS V2 None CVSS V3 None
Description
A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.
Overview
  • CVE ID
  • CVE-2024-11079
  • Assigner
  • redhat
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-11-11T23:32:55.539Z
  • Last Modified Date
  • 2024-11-11T23:32:55.539Z
References
Reference URL Reference Tags
https://access.redhat.com/security/cve/CVE-2024-11079 vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2325171 issue-tracking x_refsource_REDHAT
History
Created Old Value New Value Data Type Notes
2024-11-12 13:26:32 Added to TrackCVE