Ansible: template injection

CVE-2023-5764

Summary

A template injection flaw exists in Ansible that could potentially allow an attacker to manipulate the internal templating operations of a user's controller. Specifically, this vulnerability may enable an attacker to craft a file that strips the 'unsafe' designation from template data, thus permitting malicious template code to be executed. It is crucial for users to review the affected versions and apply the necessary updates to safeguard their systems from potential exploitation.

References