Threats tagged 'brew-bbot-cve-2024-11079'

Ansible-Core contains a vulnerability (CVE-2024-11079) that allows attackers to bypass unsafe content protections by exploiting the hostvars object to reference and execute templated content. This flaw can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks. The issue affects versions from 1.0.5.1665 up to but not including 2.4.0. A fix is available in version 2.4.0 and later.