Every CVE Search/ Get API key

CVE-2023-5189

Hub: insecure galaxy-importer tarfile extraction

6.3 Medium

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
High
Availability
None

Exploit likelihood

0.98%Up 0.9 points since Nov 15, 2023
90%50%10%1%

What each source reports

CVE List Score used 6.3

Hub: insecure galaxy-importer tarfile extraction

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Record
CVE-2023-5189
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
Weakness
CWE-23
Updated
2026-11-02
EUVDEUVD-2023-2886 6.3

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Record
EUVD-2023-2886
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-55g2-vm3q-7w52 6.3

Ansible galaxy-importer Path Traversal vulnerability

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Record
GHSA-55g2-vm3q-7w52
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
Weakness
CWE-22, CWE-23
Updated
2026-11-02
NVD 6.3

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Record
CVE-2023-5189
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness
CWE-23, CWE-22
Updated
2026-11-02
OSVGHSA-55g2-vm3q-7w52 6.3

Ansible galaxy-importer Path Traversal vulnerability

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Record
GHSA-55g2-vm3q-7w52
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
Weakness
CWE-22, CWE-23
Updated
2026-11-02
OSVPYSEC-2026-1401 6.3

Ansible galaxy-importer Path Traversal vulnerability

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Record
PYSEC-2026-1401
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVRHSA-2023:7773 7.1

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update

Record
RHSA-2023:7773
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:1536 7.5

Red Hat Security Advisory: Satellite 6.14.3 Async Security Update

Record
RHSA-2024:1536
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:2010 7.6

Red Hat Security Advisory: Satellite 6.15.0 release

Record
RHSA-2024:2010
CVSS 3.1
7.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2023-5189 6.3

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Record
UBUNTU-CVE-2023-5189
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
galaxy-importer
PyPI
 through 0.4.16 None known
galaxy-importer
PyPI
 through 0.4.16, plus listed versions
0.1.00.1.10.1.20.1.2.dev00.1.3
Show 45 moreShow less
0.1.3b10.1.3b100.1.3b110.1.3b20.1.3b30.1.3b40.1.3b50.1.3b60.1.3b70.1.3b80.1.40.1.50.1.60.1.70.1.7a10.1.80.2.00.2.10.2.110.2.120.2.130.2.140.2.150.2.160.2.1a10.2.20.2.2a10.2.2a20.2.2a30.2.2a40.2.30.2.40.2.50.2.5a10.2.5a20.2.60.2.70.2.80.2.8rc10.2.8rc100.2.8rc110.2.8rc120.2.8rc30.2.8rc40.2.8rc5
 None known
python39-galaxy-importer
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 2 CVEs
 before 0:0.4.18-1.el8ap
0:0.4.18-1.el8ap
python3x-galaxy-importer
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 2 CVEs
 before 0:0.4.18-1.el8ap
0:0.4.18-1.el8ap
python-galaxy-importer
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 2 CVEs
 before 0:0.4.18-1.el9ap
0:0.4.18-1.el9ap
python3-galaxy-importer
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 2 CVEs
 before 0:0.4.18-1.el9ap
0:0.4.18-1.el9ap
ansible-core
Red Hat:ansible_automation_platform_developer:2.4::el8
From an advisory covering 2 CVEs
 before 1:2.15.8-1.el8ap
1:2.15.8-1.el8ap
ansible-core
Red Hat:ansible_automation_platform_inside:2.4::el8
From an advisory covering 2 CVEs
 before 1:2.15.8-1.el8ap
1:2.15.8-1.el8ap
ansible-core
Red Hat:ansible_automation_platform:2.4::el8
From an advisory covering 2 CVEs
 before 1:2.15.8-1.el8ap
1:2.15.8-1.el8ap
ansible-core
Red Hat:ansible_automation_platform_developer:2.4::el9
From an advisory covering 2 CVEs
 before 1:2.15.8-1.el9ap
1:2.15.8-1.el9ap
Show 95 moreShow less
Affected packages
PackageAffectedFixed
ansible-core
Red Hat:ansible_automation_platform_inside:2.4::el9
From an advisory covering 2 CVEs
 before 1:2.15.8-1.el9ap
1:2.15.8-1.el9ap
ansible-core
Red Hat:ansible_automation_platform:2.4::el9
From an advisory covering 2 CVEs
 before 1:2.15.8-1.el9ap
1:2.15.8-1.el9ap
python-galaxy-importer
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:0.4.18-2.el8pc
0:0.4.18-2.el8pc
python39-galaxy-importer
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:0.4.18-2.el8pc
0:0.4.18-2.el8pc
python-galaxy-importer
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:0.4.18-2.el8pc
0:0.4.18-2.el8pc
python39-galaxy-importer
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:0.4.18-2.el8pc
0:0.4.18-2.el8pc
python-django
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.2.22-1.el8pc
0:3.2.22-1.el8pc
python39-django
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.2.22-1.el8pc
0:3.2.22-1.el8pc
python-django
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.2.22-1.el8pc
0:3.2.22-1.el8pc
python39-django
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.2.22-1.el8pc
0:3.2.22-1.el8pc
python-aiohttp
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.9.2-0.1.el8pc
0:3.9.2-0.1.el8pc
python-aiohttp-debugsource
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.9.2-0.1.el8pc
0:3.9.2-0.1.el8pc
python39-aiohttp
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.9.2-0.1.el8pc
0:3.9.2-0.1.el8pc
python39-aiohttp-debuginfo
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.9.2-0.1.el8pc
0:3.9.2-0.1.el8pc
python-aiohttp
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.9.2-0.1.el8pc
0:3.9.2-0.1.el8pc
python-aiohttp-debugsource
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.9.2-0.1.el8pc
0:3.9.2-0.1.el8pc
python39-aiohttp
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.9.2-0.1.el8pc
0:3.9.2-0.1.el8pc
python39-aiohttp-debuginfo
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.9.2-0.1.el8pc
0:3.9.2-0.1.el8pc
python-jinja2
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.1.3-0.1.el8pc
0:3.1.3-0.1.el8pc
python39-jinja2
Red Hat:satellite_capsule:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.1.3-0.1.el8pc
0:3.1.3-0.1.el8pc
python-jinja2
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.1.3-0.1.el8pc
0:3.1.3-0.1.el8pc
python39-jinja2
Red Hat:satellite:6.14::el8
From an advisory covering 7 CVEs
 before 0:3.1.3-0.1.el8pc
0:3.1.3-0.1.el8pc
python-pygments
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:2.17.0-1.el8pc
0:2.17.0-1.el8pc
python3.11-pygments
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:2.17.0-1.el8pc
0:2.17.0-1.el8pc
python-pygments
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:2.17.0-1.el8pc
0:2.17.0-1.el8pc
python3.11-pygments
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:2.17.0-1.el8pc
0:2.17.0-1.el8pc
foreman
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman
Red Hat:satellite_utils:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-cli
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-debug
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-ec2
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-journald
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-libvirt
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-openstack
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-ovirt
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-pcp
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-postgresql
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-redis
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-service
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-telemetry
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
foreman-vmware
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.1.6-1.el8sat
0:3.9.1.6-1.el8sat
python-galaxy-importer
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:0.4.19-2.el8pc
0:0.4.19-2.el8pc
python3.11-galaxy-importer
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:0.4.19-2.el8pc
0:0.4.19-2.el8pc
python-galaxy-importer
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:0.4.19-2.el8pc
0:0.4.19-2.el8pc
python3.11-galaxy-importer
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:0.4.19-2.el8pc
0:0.4.19-2.el8pc
puppetserver
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:7.14.0-1.el8sat
0:7.14.0-1.el8sat
puppetserver
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:7.14.0-1.el8sat
0:7.14.0-1.el8sat
python-aiohttp
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.2-1.el8pc
0:3.9.2-1.el8pc
python-aiohttp-debugsource
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.2-1.el8pc
0:3.9.2-1.el8pc
python3.11-aiohttp
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.2-1.el8pc
0:3.9.2-1.el8pc
python3.11-aiohttp-debuginfo
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.2-1.el8pc
0:3.9.2-1.el8pc
python-aiohttp
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.2-1.el8pc
0:3.9.2-1.el8pc
python-aiohttp-debugsource
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.2-1.el8pc
0:3.9.2-1.el8pc
python3.11-aiohttp
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.2-1.el8pc
0:3.9.2-1.el8pc
python3.11-aiohttp-debuginfo
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.9.2-1.el8pc
0:3.9.2-1.el8pc
rubygem-activesupport
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:6.1.7.6-1.el8sat
0:6.1.7.6-1.el8sat
rubygem-activesupport
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:6.1.7.6-1.el8sat
0:6.1.7.6-1.el8sat
python-django
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:4.2.9-1.el8pc
0:4.2.9-1.el8pc
python3.11-django
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:4.2.9-1.el8pc
0:4.2.9-1.el8pc
python-django
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:4.2.9-1.el8pc
0:4.2.9-1.el8pc
python3.11-django
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:4.2.9-1.el8pc
0:4.2.9-1.el8pc
python-pycryptodomex
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.20.0-1.el8pc
0:3.20.0-1.el8pc
python-pycryptodomex-debugsource
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.20.0-1.el8pc
0:3.20.0-1.el8pc
python3.11-pycryptodomex
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.20.0-1.el8pc
0:3.20.0-1.el8pc
python3.11-pycryptodomex-debuginfo
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.20.0-1.el8pc
0:3.20.0-1.el8pc
python-pycryptodomex
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.20.0-1.el8pc
0:3.20.0-1.el8pc
python-pycryptodomex-debugsource
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.20.0-1.el8pc
0:3.20.0-1.el8pc
python3.11-pycryptodomex
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.20.0-1.el8pc
0:3.20.0-1.el8pc
python3.11-pycryptodomex-debuginfo
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.20.0-1.el8pc
0:3.20.0-1.el8pc
rubygem-puma
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:6.4.2-1.el8sat
0:6.4.2-1.el8sat
rubygem-puma-debuginfo
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:6.4.2-1.el8sat
0:6.4.2-1.el8sat
rubygem-puma-debugsource
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:6.4.2-1.el8sat
0:6.4.2-1.el8sat
rubygem-audited
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:5.4.2-1.el8sat
0:5.4.2-1.el8sat
python-jinja2
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.1.3-1.el8pc
0:3.1.3-1.el8pc
python3.11-jinja2
Red Hat:satellite_capsule:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.1.3-1.el8pc
0:3.1.3-1.el8pc
python-jinja2
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.1.3-1.el8pc
0:3.1.3-1.el8pc
python3.11-jinja2
Red Hat:satellite:6.15::el8
From an advisory covering 18 CVEs
 before 0:3.1.3-1.el8pc
0:3.1.3-1.el8pc
ansible
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.1+dfsg-11.3.4+dfsg-11.4.0+dfsg-11.4.1+dfsg-11.4.3+dfsg-1
Show 5 moreShow less
1.4.4+dfsg-11.5.4+dfsg-11.5.4+dfsg-1ubuntu0.1~esm11.5.4+dfsg-1ubuntu0.1~esm21.5.4+dfsg-1ubuntu0.1~esm3
 None known
ansible
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.9.2+dfsg-21.9.4-12.0.0.2-22.0.0.2-2ubuntu12.0.0.2-2ubuntu1.1
Show 8 moreShow less
2.0.0.2-2ubuntu1.22.0.0.2-2ubuntu1.32.0.0.2-2ubuntu1.3+esm12.0.0.2-2ubuntu1.3+esm22.0.0.2-2ubuntu1.3+esm32.0.0.2-2ubuntu1.3+esm42.0.0.2-2ubuntu1.3+esm52.0.0.2-2ubuntu1.3+esm6
 None known
ansible
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.3.1.0+dfsg-22.5.0+dfsg-12.5.1+dfsg-12.5.1+dfsg-1ubuntu0.12.5.1+dfsg-1ubuntu0.1+esm1
Show 4 moreShow less
2.5.1+dfsg-1ubuntu0.1+esm22.5.1+dfsg-1ubuntu0.1+esm32.5.1+dfsg-1ubuntu0.1+esm42.5.1+dfsg-1ubuntu0.1+esm5
 None known
ansible
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.8.3+dfsg-12.8.6+dfsg-12.9.2+dfsg-12.9.4+dfsg-12.9.6+dfsg-12.9.6+dfsg-1ubuntu0.1~esm12.9.6+dfsg-1ubuntu0.1~esm22.9.6+dfsg-1ubuntu0.1~esm3
 None known
ansible-core
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.12.0-12.12.0-1ubuntu0.1
 None known
ansible
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
2.10.7+merged+base+2.10.8+dfsg-12.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm12.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4
 None known
ansible
Ubuntu:24.04:LTS
 All versions, plus listed versions
7.7.0+dfsg-17.7.0+dfsg-39.2.0+dfsg-0ubuntu49.2.0+dfsg-0ubuntu5
 None known
ansible-core
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.14.9-22.14.11-12.14.11-22.14.13-12.16.3-0ubuntu12.16.3-0ubuntu2
 None known
ansible
Ubuntu:25.10
 All versions, plus listed versions
11.2.0+dfsg-112.0.0~a2+dfsg-112.0.0~a4+dfsg-112.0.0~a6+dfsg-112.0.0~b1+dfsg-1
 None known
ansible-core
Ubuntu:25.10
 All versions, plus listed versions
2.18.1-4ubuntu12.19.0~beta4-1ubuntu12.19.0-1ubuntu1
 None known
ansible
Ubuntu:26.10
 All versions, plus listed versions
13.1.0+dfsg-1ubuntu113.4.0+dfsg-1
 None known
ansible-core
Ubuntu:26.10
 All versions, plus listed versions
2.20.1-12.21.1~rc1-12.21.1~rc1-22.21.1~rc1-2ubuntu12.22.0~beta2-1
 None known
ansible
Ubuntu:26.04:LTS
 All versions, plus listed versions
12.0.0~b1+dfsg-112.0.0+dfsg-112.2.0+dfsg-113.1.0+dfsg-113.1.0+dfsg-1ubuntu1
 None known
ansible-core
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.19.0-1ubuntu12.19.4-12.20.1-1
 None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-5189 is a medium vulnerability (CVSS 6.3) in Red Hat Ansible Automation Platform 2.4 For Rhel 8, published November 14, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 24 versions and 155 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open