漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Event-driven-ansible: authenticated argument injection in git url in eda project creation
Vulnerability Description
A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to the git ls-remote command. This vulnerability allows an authenticated attacker to inject arguments and execute arbitrary commands on the EDA worker. In Kubernetes/OpenShift environments, this can lead to service account token theft and cluster access.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
参数注入或修改
Vulnerability Title
Red Hat Ansible Automation Platform 参数注入漏洞
Vulnerability Description
Red Hat Ansible Automation Platform（Red Hat AAP）是美国红帽（Red Hat）公司的一款实现战略性自动化的统一解决方案。 Red Hat Ansible Automation Platform存在参数注入漏洞，该漏洞源于用户提供的Git URL未经验证，可能导致命令注入和服务账户令牌窃取。
CVSS Information
N/A
Vulnerability Type
N/A