github.com/ansible-semaphore/semaphore

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.8

CVE-2023-39059

Code injection in ansible semaphore

An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.

github.com/ansible-semaphore/semaphore Go

Aug 28, 2023
Critical 9.8

CVE-2023-28609

Ansible Semaphore mishandles authentication

api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.

github.com/ansible-semaphore/semaphore Go

Mar 18, 2023