mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 17:22:02 +00:00
830 B
830 B
CVE-2019-3828
Description
Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.
POC
Reference
- http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html
- http://packetstormsecurity.com/files/172837/Ansible-Fetch-Path-Traversal.html
Github
No PoCs found on GitHub currently.