CVE-2023-39059

CVE-2023-39059 is a critical remote code execution vulnerability affecting Ansible Semaphore version 2.8.90. An authenticated attacker can exploit this by injecting a crafted payload into the "extra variables" parameter, leading to arbitrary code execution. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its low attack complexity and severe impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, its high FAUCET Risk Score of 72/100 indicates a substantial potential threat.