CVE-2021-4041CWE-20

A flaw was found in ansible-runner

published August 24, 2022

CVSS
—
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interface.run_command, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual environment.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-08-24T15:11Z
EPSS history
Timeline
  • 24 AUG 15:11Z
    A flaw was found in ansible-runner
    cvelistv5