CVE-2023-5115 Ansible: malicious role archive can cause ansible

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2023-5764 and CVE-2023-5115 Affect Ansible Users Two vulnerabilities in Ansible have been identified: CVE-2023-5764, a template injection issue, and CVE-2023-5115, which involves a malicious role archive that can disrupt Ansible operations. Both vulnerabilities were published in December 2023 and may impact users relying on Ansible for automation tasks. 2 sources 57