CVE-2017-7481

Description

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as unsafe and is not evaluated.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.923

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-7466,CVE-2017-7481 are fixed in Python-ansible 2.2.3.0Windows
Vulnerabilities CVE-2017-7481 are fixed in Python-ansible 2.1.6.0Windows
Vulnerabilities CVE-2017-7481 are fixed in Python-ansible 2.3.1.0Windows
Configuration management, deployment, and task execution system (USN-4072-1) ansible_2.0.0.2-2ubuntu1.3_all.debLinux
Configuration management, deployment, and task execution system (USN-4072-1) ansible_2.5.1+dfsg-1ubuntu0.1_all.debLinux
Configuration management, deployment, and task execution system (USN-4072-1) ansible_2.7.8+dfsg-1ubuntu0.19.04.1_all.debLinux
Vulnerabilities CVE-2017-7466,CVE-2017-7481 are fixed in Python-ansible for linux 2.2.3.0Linux
Vulnerabilities CVE-2017-7481 are fixed in Python-ansible for linux 2.1.6.0Linux
Vulnerabilities CVE-2017-7481 are fixed in Python-ansible for linux 2.3.1.0Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234