Lucene search

CVE-2023-32313 Inspect method manipulation in vm2

🗓️ 15 May 2023 19:13:45Reported by GitHub_MType

vm2 sandbox inspect method manipulation vulnerability patched in version 3.9.1

Reporter	Title	Published	Views	Family All 17
OSV	vm2 vulnerable to Inspect Manipulation	17 May 202303:49	–	osv
OSV	CVE-2023-32313	15 May 202320:15	–	osv
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that run designer flows containing Box nodes are vulnerable to security restriction bypass due to [CVE-2023-32313]	1 Jun 202315:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	5 Jul 202318:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	25 Sep 202417:28	–	ibm
NVD	CVE-2023-32313	15 May 202320:15	–	nvd
RedhatCVE	CVE-2023-32313	18 May 202319:16	–	redhatcve
Github Security Blog	vm2 vulnerable to Inspect Manipulation	17 May 202303:49	–	github
CVE	CVE-2023-32313	15 May 202320:15	–	cve
Prion	Command injection	15 May 202320:15	–	prion

[
  {
    "vendor": "patriksimek",
    "product": "vm2",
    "versions": [
      {
        "version": "< 3.9.18",
        "status": "affected"
      }
    ]
  }
]

Source	Link
gist	www.gist.github.com/arkark/c1c57eaf3e0a649af1a70c2b93b17550
github	www.github.com/patriksimek/vm2/releases/tag/3.9.18
github	www.github.com/patriksimek/vm2/commit/5206ba25afd86ef547a2c9d48d46ca7a9e6ec238
github	www.github.com/patriksimek/vm2/security/advisories/GHSA-p5gc-c584-jj6v

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 May 2023 19:45Current

6.0Medium risk

Vulners AI Score6.0

CVSS35.3

EPSS0.001

CWE-74