CVE-2025-43012

Updated on 17 Apr 2025

Severity

9.8 Critical severity

CVSS score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE ID: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb