Dashboard / CVE-2024-11079

CVE-2024-11079

MEDIUM
MEDIUM Priority: 0.03 BB Relevance: 41/100
Published: 2024-11-12 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network Scope Change

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: Required
S: Changed
C: Low
I: Low
A: Low

Description

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
— — 0

References & Advisories (5)

https://access.redhat.com/errata/RHSA-2024:10770
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:11145
vendor-advisory x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2325171
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

41 / 100
✓ Network accessible

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

EPSS — Exploitation Probability

0.53%
Raw Score 0.005290
Percentile 45.3%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00529
2026-11-13
0.00529
2026-11-12
0.00529
2026-11-10
0.00529
2026-11-09
0.00529
2026-11-08
0.00529
2026-11-07
0.00529
2026-11-06
0.00529
2026-11-05
0.00529
2026-11-04
0.00529

Intelligence Sources

mitre ref →
nvd ref →

External Links