CVE-2021-3583

Description

A flaw was found in Ansible, where a users controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity.

Risk Information

Base Score

7.1

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS Score

Exploitation Probability

0.319

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-3583 are fixed in Python-ansible 2.10.11rc1	Windows
Vulnerabilities CVE-2021-3583 are fixed in Python-ansible 2.9.23rc1	Windows
Vulnerabilities CVE-2021-3583 are fixed in Python-ansible for linux 2.10.11rc1	Linux
Vulnerabilities CVE-2021-3583 are fixed in Python-ansible for linux 2.9.23rc1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234