Description
An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/ansible-semaphore/semaphore | <= 2.8.90 | — | GHSA-3r32-cp7v-5wq4 |