We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-39059



Assignermitre
Reserved2023-07-25
Published2023-08-28
Updated2024-10-02

Description

An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.

References

https://www.alevsk.com/2023/07/a-quick-story-of-security-pitfalls-with-execcommand-in-software-integrations/

https://gist.github.com/Alevsk/1757da24c5fb8db735d392fd4146ca3a

cve.org CVE-2023-39059

nvd.nist.gov CVE-2023-39059

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.