CVE-2023-1304

🗓️ 21 Mar 2023 17:11:15Reported by [email protected]Type

Exposure of getattr() method in Jinja template leads to OS command execution

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2023-1304	21 Mar 202317:15	–	cve
Cvelist	CVE-2023-1304 Rapid7 InsightCloudSec getattr() method access	21 Mar 202316:45	–	cvelist
Prion	Code injection	21 Mar 202317:15	–	prion
Vulnrichment	CVE-2023-1304 Rapid7 InsightCloudSec getattr() method access	21 Mar 202316:45	–	vulnrichment

Nvd

Node

rapid7 insightappsecRange<23.2.1self-managed

rapid7 insightcloudsecRange<2023.02.01managed

rapid7 insightcloudsecRange<2023.02.01saas

Source	Link
docs	www.docs.divvycloud.com/changelog/23321-release-notes
nephosec	www.nephosec.com/exploiting-rapid7s-insightcloudsec/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Mar 2023 17:15Current

8.6High risk

Vulners AI Score8.6

CVSS38.8

EPSS0.00133

CWE-94