Lucene search
GoogleOSV:GHSA-H3XG-WV58-5P43HistoryNov 16, 2023 - 6:30 p.m.
Ray OS Command Injection vulnerability
2023-11-1618:30:31
Google
osv.dev
16
ray software
command injection
remote execution
os command
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.919
Percentile
99.0%
A command injection exists in Ray’s cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication.
Related
exploitdb
exploitdb
Ray OS v2.6.3 - Command Injection RCE(Unauthorized)
2024-04-12 00:00:00
zdt
zdt
Ray cpu_profile Command Injection Exploit
2024-08-27 00:00:00
Ray OS v2.6.3 - Command Injection Exploit
2024-04-12 00:00:00
packetstorm
packetstorm
Ray OS 2.6.3 Command Injection
2024-04-12 00:00:00
Ray cpu_profile Command Injection
2024-08-23 00:00:00
githubexploit
githubexploit
Exploit for OS Command Injection in Ray Project Ray
2024-04-10 09:24:06
Exploit for OS Command Injection in Ray Project Ray
2024-04-21 14:30:28
github
github
Ray OS Command Injection vulnerability
2023-11-16 18:30:31
Ray Path Traversal vulnerability
2023-11-16 18:30:31
Ray Missing Authorization vulnerability
2023-11-16 21:30:46
metasploit
metasploit
Ray cpu_profile command injection
2024-08-08 23:51:14
cvelist
cvelist
CVE-2023-6019 Ray Command Injection in cpu_profile Parameter
2023-11-16 16:12:07
CVE-2023-6021 Ray Log File Local File Include
2023-11-16 16:11:42
osv
osv
Ray Path Traversal vulnerability
2023-11-16 18:30:31
Ray Missing Authorization vulnerability
2023-11-16 21:30:46
nvd
nvd
CVE-2023-6019
2023-11-16 17:15:08
CVE-2023-6021
2023-11-16 17:15:09
prion
prion
Authentication flaw
2023-11-16 17:15:00
Command injection
2023-11-16 17:15:00
thn
thn
cve
cve
CVE-2023-6021
2023-11-16 17:15:09
CVE-2023-6019
2023-11-16 17:15:08
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 08/30/2024
2024-08-30 18:43:05
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.919
Percentile
99.0%
Related for OSV:GHSA-H3XG-WV58-5P43