[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-5115":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":49,"aliases":50,"duplicate_of":9,"upstream":52,"downstream":53,"duplicates":74,"related":75,"reserved_at":9,"published_at":81,"modified_at":82,"state":83,"summary":84,"references_raw":93,"kevs":140,"epss":141,"epss_history":144,"metrics":407,"affected":416},"CVE-2023-5115","An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.",null,[11,40],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-22","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","weakness","Stable","Base","High",[20,24,28,32,36],{"id":21,"name":22,"techniques":23},"CAPEC-126","Path Traversal",[],{"id":25,"name":26,"techniques":27},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":29,"name":30,"techniques":31},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":33,"name":34,"techniques":35},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":37,"name":38,"techniques":39},"CAPEC-79","Using Slashes in Alternate Encoding",[],{"_key":41,"id":41,"name":42,"description":43,"type":15,"status":44,"abstraction":17,"likelihood_of_exploit":9,"capec":45},"CWE-36","Absolute Path Traversal","The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize absolute path sequences such as \"/abs/path\" that can resolve to a location that is outside of that directory.","Draft",[46],{"id":47,"name":42,"techniques":48},"CAPEC-597",[],[],[51],"GHSA-jpvw-p8pr-9g2x",[],[54,56,58,60,62,64,66,68,70,72],{"_key":55},"OPENSUSE-SU-2024:14537-1",{"_key":57},"OPENSUSE-SU-2024:14251-1",{"_key":59},"OPENSUSE-SU-2025:15754-1",{"_key":61},"DLA-3695-1",{"_key":63},"OPENSUSE-SU-2025:15638-1",{"_key":65},"DEBIAN-CVE-2023-5115",{"_key":67},"UBUNTU-CVE-2023-5115",{"_key":69},"RHSA-2023:5701",{"_key":71},"RHSA-2023:5758",{"_key":73},"OPENSUSE-SU-2026:10945-1",[],[76,77,78,79,80],{"_key":55},{"_key":57},{"_key":59},{"_key":63},{"_key":73},"2023-12-18T13:43:07.791Z","2025-11-20T17:29:54.523Z","Modified",{"cisa_kev":85,"cisa_ransomware":85,"cisa_vendor":9,"epss_severity":86,"epss_score":87,"severity":88,"severity_score":89,"severity_version":90,"severity_source":91,"severity_vector":92,"severity_status":83},false,"low",0.0066,"medium",6.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",[94,103,107,112,117,122,127,131,135],{"url":95,"sources":96,"tags":99},"https://access.redhat.com/errata/RHSA-2023:5701",[91,97,98],"nvd","osv_pypi",[100,101,102],"Vendor Advisory","X Refsource REDHAT","WEB",{"url":104,"sources":105,"tags":106},"https://access.redhat.com/errata/RHSA-2023:5758",[91,97,98],[100,101,102],{"url":108,"sources":109,"tags":110},"https://access.redhat.com/security/cve/CVE-2023-5115",[91,97,98],[111,101,100,102],"VDB Entry",{"url":113,"sources":114,"tags":115},"https://bugzilla.redhat.com/show_bug.cgi?id=2233810",[91,97,98],[116,101,102],"Issue Tracking",{"url":118,"sources":119,"tags":120},"https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html",[91,97,98],[121,102],"X Transferred",{"url":123,"sources":124,"tags":125},"https://nvd.nist.gov/vuln/detail/CVE-2023-5115",[98],[126],"Advisory",{"url":128,"sources":129,"tags":130},"https://github.com/ansible/ansible/commit/1e930684bc0a76ec3d094cd326738ad26416541c",[98],[102],{"url":132,"sources":133,"tags":134},"https://github.com/ansible-community/ansible-build-data/blob/16d36538b96c65d9e0e28d89781361b69857ac0e/8/CHANGELOG-v8.rst#L221",[98],[102],{"url":136,"sources":137,"tags":138},"https://github.com/ansible/ansible",[98],[139],"PACKAGE",[],{"date":142,"score":87,"percentile":143},"2026-06-04",0.71482,[145,149,152,155,158,161,164,167,170,173,176,179,182,185,187,191,194,197,200,203,206,209,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253,255,258,261,264,267,270,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,340,343,346,349,351,354,357,359,361,364,367,369,372,375,377,379,382,385,389,392,395,398,401,404],{"date":146,"score":147,"percentile":148},"2025-11-04",0.00337,0.55942,{"date":150,"score":147,"percentile":151},"2025-11-05",0.55905,{"date":153,"score":147,"percentile":154},"2025-11-06",0.55914,{"date":156,"score":147,"percentile":157},"2025-11-07",0.55934,{"date":159,"score":147,"percentile":160},"2025-11-08",0.55937,{"date":162,"score":147,"percentile":163},"2025-11-09",0.55928,{"date":165,"score":147,"percentile":166},"2025-11-10",0.55906,{"date":168,"score":147,"percentile":169},"2025-11-11",0.55919,{"date":171,"score":147,"percentile":172},"2025-11-12",0.55945,{"date":174,"score":147,"percentile":175},"2025-11-13",0.55952,{"date":177,"score":147,"percentile":178},"2025-11-14",0.55954,{"date":180,"score":147,"percentile":181},"2025-11-15",0.55944,{"date":183,"score":147,"percentile":184},"2025-11-16",0.55927,{"date":186,"score":147,"percentile":169},"2025-11-17",{"date":188,"score":189,"percentile":190},"2025-11-18",0.00432,0.59957,{"date":192,"score":189,"percentile":193},"2025-11-19",0.59971,{"date":195,"score":189,"percentile":196},"2025-11-20",0.5996,{"date":198,"score":147,"percentile":199},"2025-11-21",0.55929,{"date":201,"score":147,"percentile":202},"2025-11-22",0.55925,{"date":204,"score":147,"percentile":205},"2025-11-23",0.55899,{"date":207,"score":147,"percentile":208},"2025-11-24",0.55894,{"date":210,"score":147,"percentile":205},"2025-11-25",{"date":212,"score":147,"percentile":213},"2025-11-26",0.55902,{"date":215,"score":147,"percentile":216},"2025-11-27",0.55904,{"date":218,"score":147,"percentile":219},"2025-11-28",0.55878,{"date":221,"score":147,"percentile":222},"2025-11-29",0.55864,{"date":224,"score":147,"percentile":225},"2025-11-30",0.55851,{"date":227,"score":147,"percentile":228},"2025-12-01",0.5601,{"date":230,"score":147,"percentile":231},"2025-12-02",0.56022,{"date":233,"score":147,"percentile":234},"2025-12-03",0.56018,{"date":236,"score":147,"percentile":237},"2025-12-04",0.55853,{"date":239,"score":147,"percentile":240},"2025-12-05",0.55869,{"date":242,"score":147,"percentile":243},"2025-12-06",0.5587,{"date":245,"score":147,"percentile":246},"2025-12-07",0.55865,{"date":248,"score":147,"percentile":249},"2025-12-08",0.55867,{"date":251,"score":147,"percentile":252},"2025-12-09",0.55883,{"date":254,"score":147,"percentile":148},"2025-12-10",{"date":256,"score":147,"percentile":257},"2025-12-11",0.55965,{"date":259,"score":147,"percentile":260},"2025-12-12",0.55987,{"date":262,"score":147,"percentile":263},"2025-12-13",0.5598,{"date":265,"score":147,"percentile":266},"2025-12-14",0.55976,{"date":268,"score":147,"percentile":269},"2025-12-15",0.55962,{"date":271,"score":147,"percentile":266},"2025-12-16",{"date":273,"score":147,"percentile":274},"2025-12-17",0.55995,{"date":276,"score":147,"percentile":277},"2025-12-18",0.56036,{"date":279,"score":147,"percentile":280},"2025-12-19",0.56039,{"date":282,"score":147,"percentile":283},"2025-12-20",0.56031,{"date":285,"score":147,"percentile":286},"2025-12-21",0.56009,{"date":288,"score":147,"percentile":289},"2025-12-22",0.55991,{"date":291,"score":147,"percentile":292},"2025-12-23",0.55998,{"date":294,"score":147,"percentile":295},"2025-12-24",0.56006,{"date":297,"score":147,"percentile":298},"2025-12-25",0.56054,{"date":300,"score":147,"percentile":301},"2025-12-26",0.5605,{"date":303,"score":147,"percentile":304},"2025-12-27",0.56102,{"date":306,"score":147,"percentile":307},"2025-12-28",0.56014,{"date":309,"score":147,"percentile":310},"2025-12-29",0.55997,{"date":312,"score":147,"percentile":313},"2025-12-30",0.55992,{"date":315,"score":147,"percentile":316},"2025-12-31",0.56005,{"date":318,"score":147,"percentile":319},"2026-01-01",0.56172,{"date":321,"score":147,"percentile":322},"2026-01-02",0.56153,{"date":324,"score":147,"percentile":325},"2026-01-03",0.56142,{"date":327,"score":147,"percentile":328},"2026-01-04",0.5597,{"date":330,"score":147,"percentile":331},"2026-01-05",0.55961,{"date":333,"score":147,"percentile":334},"2026-01-06",0.55969,{"date":336,"score":147,"percentile":337},"2026-01-07",0.55996,{"date":339,"score":147,"percentile":234},"2026-01-08",{"date":341,"score":147,"percentile":342},"2026-01-09",0.56015,{"date":344,"score":147,"percentile":345},"2026-01-10",0.56013,{"date":347,"score":147,"percentile":348},"2026-01-11",0.55988,{"date":350,"score":147,"percentile":148},"2026-01-12",{"date":352,"score":147,"percentile":353},"2026-01-13",0.55918,{"date":355,"score":147,"percentile":356},"2026-01-14",0.55963,{"date":358,"score":147,"percentile":328},"2026-01-15",{"date":360,"score":147,"percentile":313},"2026-01-16",{"date":362,"score":147,"percentile":363},"2026-01-17",0.55986,{"date":365,"score":147,"percentile":366},"2026-01-18",0.55979,{"date":368,"score":147,"percentile":328},"2026-01-19",{"date":370,"score":147,"percentile":371},"2026-01-20",0.55973,{"date":373,"score":147,"percentile":374},"2026-01-21",0.55977,{"date":376,"score":147,"percentile":366},"2026-01-22",{"date":378,"score":147,"percentile":231},"2026-01-23",{"date":380,"score":147,"percentile":381},"2026-01-24",0.56025,{"date":383,"score":147,"percentile":384},"2026-01-25",0.55983,{"date":386,"score":387,"percentile":388},"2026-01-26",0.00716,0.71896,{"date":390,"score":387,"percentile":391},"2026-01-27",0.71897,{"date":393,"score":387,"percentile":394},"2026-01-28",0.71913,{"date":396,"score":387,"percentile":397},"2026-01-29",0.71912,{"date":399,"score":387,"percentile":400},"2026-01-30",0.71916,{"date":402,"score":387,"percentile":403},"2026-01-31",0.7192,{"date":405,"score":147,"percentile":406},"2026-02-01",0.56146,[408,412,414],{"source":91,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":409,"cvss_v4_0":9},{"baseScore":89,"baseSeverity":410,"vectorString":92,"impactScore":4,"exploitabilityScore":411},"MEDIUM",5.4,{"source":97,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":413,"cvss_v4_0":9},{"baseScore":89,"baseSeverity":410,"vectorString":92,"impactScore":4,"exploitabilityScore":411},{"source":98,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":415,"cvss_v4_0":9},{"baseScore":89,"baseSeverity":9,"vectorString":92,"impactScore":4,"exploitabilityScore":411},[417,426,437,449,457],{"ecosystem":9,"name":418,"vendor":419,"product":420,"cpe_part":421,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":422},"debian linux","debian","debian_linux","o",[423],{"version":424,"is_range":85,"range_type":425,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0","cpe",{"ecosystem":427,"name":428,"vendor":427,"product":428,"cpe_part":9,"purl_type":429,"purl_namespace":9,"purl_name":428,"source":9,"versions":430},"PyPI","ansible","pypi",[431],{"version":432,"is_range":433,"range_type":434,"version_start":9,"version_start_type":9,"version_end":435,"version_end_type":436,"fixed_in":9},"lt8_5_0",true,"ecosystem","8.5.0","excluding",{"ecosystem":9,"name":438,"vendor":439,"product":440,"cpe_part":441,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":442},"ansible automation platform","redhat","ansible_automation_platform","a",[443,445,447],{"version":444,"is_range":85,"range_type":425,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.2",{"version":446,"is_range":85,"range_type":425,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.3",{"version":448,"is_range":85,"range_type":425,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.4",{"ecosystem":9,"name":450,"vendor":439,"product":451,"cpe_part":441,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":452},"ansible developer","ansible_developer",[453,455],{"version":454,"is_range":85,"range_type":425,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.0",{"version":456,"is_range":85,"range_type":425,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.1",{"ecosystem":9,"name":458,"vendor":439,"product":459,"cpe_part":441,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":460},"ansible inside","ansible_inside",[461,462],{"version":456,"is_range":85,"range_type":425,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":444,"is_range":85,"range_type":425,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]