-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PythonPythonMiggo AIRoot Cause AnalysisThe vulnerability stems from passwords being processed as Jinja2 templates due to improper marking. The commit 4b5aed4 explicitly modifies ask_passwords() to wrap passwords in AnsibleUnsafeBytes, confirming this was the entry point where credentials were exposed. The pre-patch code lacked this protection, making it the root cause.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ansible | pip | >= 2.8.0, < 2.8.4 | 2.8.4 |
| ansible | pip | >= 2.7.0, < 2.7.13 | 2.7.13 |
| ansible | pip |
| >= 2.6.0, < 2.6.19 |
| 2.6.19 |
Ongoing coverage of React2Shell