—
PYSEC-2020-2
상세
An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.