What’s Vulnerable › Vulnerabilities

CVE-2023-5189: Hub: insecure galaxy-importer tarfile extraction

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-14 · updated 2026-06-17
• Weakness: CWE-23

Description

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten.

Affected products

• Red Hat Ansible Automation Platform: 2.0
• Red Hat Satellite 6: 6.0

References

• https://access.redhat.com/errata/RHSA-2023:7773
• https://access.redhat.com/errata/RHSA-2024:1536
• https://access.redhat.com/errata/RHSA-2024:2010
• https://access.redhat.com/security/cve/CVE-2023-5189
• https://bugzilla.redhat.com/show_bug.cgi?id=2234387
• https://access.redhat.com/errata/RHSA-2023:7773
• https://access.redhat.com/errata/RHSA-2024:1536
• https://access.redhat.com/errata/RHSA-2024:2010
• https://access.redhat.com/security/cve/CVE-2023-5189
• https://bugzilla.redhat.com/show_bug.cgi?id=2234387

Get alerted when CVE-2023-5189 or the next vulnerability affects your stack