Skip to content
Fencer Vulns
high 7.1

CVE-2023-5764 json

Ansible: template injection

published 2023-12-12 2 y ago modified 2026-11-05 3 d ago also GHSA-7j69-qfc3-2fq9 , PYSEC-2026-1122 , EUVD-2023-3147

cvss
7.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 47%
public exploits
0
none known

Summary

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use a specially crafted file to introduce templating injection when supplying templating data.

Patch / fix

  • pypi ansible-core 2.14.12, 2.15.8, 2.16.1
  • Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8 1:2.15.8-1.el8ap
  • Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9 1:2.15.8-1.el9ap
  • ansible Debian 14, Debian 13, Debian 12 5.4.0-1
  • ansible-core Debian 12 2.14.16-0+deb12u1
  • ansible-core Debian 14, Debian 13 2.14.13-1

debian advisories DEBIAN-CVE-2023-5764

  • ansible Ubuntu Pro 16.04 LTS 2.0.0.2-2ubuntu1.3+esm2
  • ansible Ubuntu Pro 18.04 LTS 2.5.1+dfsg-1ubuntu0.1+esm2
  • ansible Ubuntu Pro 20.04 LTS 2.9.6+dfsg-1ubuntu0.1~esm2
  • ansible Ubuntu Pro 22.04 LTS 2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4

ubuntu advisories UBUNTU-CVE-2023-5764

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • ansible-core ansible automation platform inside 2.4, ansible automation platform developer 2.4, ansible automation platform 2.4 1:2.15.8-1.el8ap
  • ansible-core ansible automation platform inside 2.4, ansible automation platform developer 2.4, ansible automation platform 2.4 1:2.15.8-1.el9ap
  • python-galaxy-importer ansible automation platform 2.4 0.4.18-1.el9ap
  • python3-galaxy-importer ansible automation platform 2.4 0.4.18-1.el9ap
  • python39-galaxy-importer ansible automation platform 2.4 0.4.18-1.el8ap
  • python3x-galaxy-importer ansible automation platform 2.4 0.4.18-1.el8ap

red hat advisories RHSA-2023:7773

  • ansible openSUSE Leap 15.5, Manager Proxy Module 4.3, Manager Client Tools 15 2.9.27-150000.1.17.2
  • grafana Manager Client Tools 15 9.5.18-150000.1.63.2
  • spacecmd openSUSE Leap 15.5, Manager Client Tools 15 4.3.27-150000.3.116.2
  • mgr-daemon Manager Client Tools 15 4.3.9-150000.1.47.2
  • spacewalk-koan Manager Client Tools 15 4.3.6-150000.3.33.2
  • dracut-saltboot openSUSE Leap 15.5, Manager Client Tools for SLE Micro 5, Manager Client Tools 15 0.1.1710765237.46af599-150000.1.53.2
  • POS_Image-JeOS7 openSUSE Leap 15.5, Manager Client Tools 15 0.1.1710765237.46af599-150000.1.21.2
  • uyuni-common-libs Manager Client Tools 15 4.3.10-150000.1.39.2

suse advisories SUSE-SU-2024:1509-1SUSE-SU-2024:1427-1

  • ansible-core-2.21 openSUSE Tumbleweed 2.21.6-1.1
  • ansible-core-2.20 openSUSE Tumbleweed 2.20.6-1.1
  • ansible-core-2.19 openSUSE Tumbleweed 2.19.4-1.1
  • ansible-core-2.18 openSUSE Tumbleweed 2.18.10-2.1
  • ansible-core-2.17 openSUSE Tumbleweed 2.17.6-1.1
  • ansible-core openSUSE Tumbleweed 2.16.9-1.1
  • ansible-documentation openSUSE Tumbleweed 2.15.7-1.1

opensuse advisories openSUSE-SU-2026:12451-1openSUSE-SU-2026:10945-1openSUSE-SU-2025:15754-1openSUSE-SU-2025:15638-1openSUSE-SU-2024:14537-1openSUSE-SU-2024:14251-1

  • ansible CBL-Mariner 2.0 2.14.12-2
  • ansible Azure Linux 3.0 2.17.0-1

azure linux advisories AZL-32158AZL-34538

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-5764 updated cvss 7.1

ansible: Template Injection

  • Red Hat Ansible Automation Platform 1.2 ansible-core
    affected: no fix available
  • Red Hat Ansible Automation Platform 2.4 for RHEL 8 ansible-core 2.15.8-1.el8ap Red Hat Ansible Automation Platform 2.4 for RHEL 9 ansible-core 2.15.8-1.el9ap
    fixed: vendor fix RHSA-2023:7773
  • Red Hat Ansible Automation Platform 2.4 for RHEL 8 ansible-test 2.15.8-1.el8ap, python39-galaxy-importer 0.4.18-1.el8ap, python3x-galaxy-importer 0.4.18-1.el8ap Red Hat Ansible Automation Platform 2.4 for RHEL 9 ansible-test 2.15.8-1.el9ap, python-galaxy-importer 0.4.18-1.el9ap, python3-galaxy-importer 0.4.18-1.el9ap
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.57% chance of exploitation in the next 30 days, higher than 47% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
OSV 3.1 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
GitHub 3.1 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Affected packages

ecosystem package affected fixed in
pypi ansible-core
>=2.16.0, <2.16.1
>=2.15.0, <2.15.8
<2.14.12
2.16.1
2.15.8
2.14.12

Affected products

  • Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • Red Hat Red Hat Ansible Automation Platform 1.2

Classification

Weakness
  • CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.