{"affected":[{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Ansible Automation Platform 2.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1:2.15.8-1.el8ap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible-core","product":"Red Hat Ansible Automation Platform 2.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1:2.15.8-1.el9ap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"ansible","product":"Red Hat Ansible Automation Platform 1.2","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2023-5764","cwes":["CWE-1336"],"description":"A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.","epss":{"date":"2026-11-04","percentile":0.47492,"score":0.00574},"exploits":[],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"}],"modifiedAt":1793878578849,"publishedAt":1702418493467,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2023:7773"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2023-5764"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247629"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2023:7773"},{"source":"ADP: CVE","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/security/cve/CVE-2023-5764"},{"source":"ADP: CVE","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247629"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7Q6CHPVCHMZS5M7V22GOKFSXZAQ24EU/"},{"source":"ADP: CVE","tags":[],"url":"https://security.netapp.com/advisory/ntap-20241025-0001/"}],"remediation":[],"revision":"f1c2c1b44cbe0e61b35615050e579d8d6c4912de58edad81d9112269c3417063","sources":[{"modifiedAt":1793878578849,"name":"CNA: redhat","retrievedAt":1793880520941,"url":"https://www.cve.org/CVERecord?id=CVE-2023-5764"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793880616469,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5764"}],"ssvc":{"assessedAt":1721361328216,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Ansible: template injection","updatedAt":1793880616469}