CVE-2023-0242

🗓️ 18 Jan 2023 20:57:30Reported by rapid7Type

cve🔗 web.nvd.nist.gov👁 58 Views🌐 WEB

Rapid7 Velociraptor allows low privilege users to overwrite files via VQL copy() function, pre-0.6.7-

Reporter	Title	Published	Views	Family All 13
CNNVD	Velocidex Velociraptor 安全漏洞	18 Jan 202300:00	–	cnnvd
Cvelist	CVE-2023-0242 Insufficient permission check in the VQL copy() function	18 Jan 202320:57	–	cvelist
EUVD	EUVD-2023-0469	3 Oct 202520:07	–	euvd
Github Security Blog	Velociraptor vulnerable to Missing Authorization	18 Jan 202321:30	–	github
NVD	CVE-2023-0242	18 Jan 202321:15	–	nvd
OSV	GHSA-G5VM-525Q-R66C Velociraptor vulnerable to Missing Authorization	18 Jan 202321:30	–	osv
OSV	GO-2023-1527 Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor	20 Aug 202420:26	–	osv
OSV	OPENSUSE-SU-2024:12916-1 system-user-velociraptor-1.0.0-2.1 on GA media	15 Jun 202400:00	–	osv
Prion	Design/Logic Flaw	18 Jan 202321:15	–	prion
Positive Technologies	PT-2023-16105 · Unknown · Velociraptor	18 Jan 202300:00	–	ptsecurity

NVD

Node

rapid7 velociraptorRange<0.6.7-5

[
  {
    "collectionURL": "https://github.com/Velocidex/velociraptor/releases",
    "defaultStatus": "unaffected",
    "modules": [
      "VQL copy() function"
    ],
    "packageName": "Velociraptor",
    "platforms": [
      "Linux",
      "Windows",
      "MacOS",
      "64 bit",
      "32 bit"
    ],
    "product": "Velociraptor",
    "programFiles": [
      "https://github.com/Velocidex/velociraptor/blob/master/vql/filesystem/copy.go"
    ],
    "programRoutines": [
      {
        "name": "copy()"
      }
    ],
    "repo": "https://github.com/Velocidex/velociraptor/",
    "vendor": "Rapid7",
    "versions": [
      {
        "changes": [
          {
            "at": "5",
            "status": "unaffected"
          }
        ],
        "lessThan": "0.6.7-5",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
docs	www.docs.velociraptor.app/announcements/2023-cves/

Parameter	Position	Path	Description	CWE
copy()	nested	github.com/Velocidex/velociraptor/blob/master/vql/filesystem/copy.go	VQL copy() function does not enforce write permissions, enabling low-privilege users to overwrite files on the server.	CWE-269, CWE-862

03 Apr 2025 20:15Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.8

EPSS0.00323