Lucene search
+L

5 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•26 views

Ray OS Command Injection vulnerability

A command injection exists in Ray's cpuprofile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication...

9.8CVSS7.5AI score0.83942EPSS
SaveExploits23References7Affected Software1
OSV
OSV
•added 2023/11/16 5:15 p.m.•16 views

CVE-2023-6019

A command injection existed in Ray's cpuprofile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here:...

9.8CVSS5.9AI score0.7463EPSS
SaveExploits16References1
NVD
NVD
•added 2023/11/16 5:15 p.m.•28 views

CVE-2023-6019

A command injection existed in Ray's cpuprofile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here:...

9.8CVSS0.7463EPSS
SaveExploits11References1
Mend
Mend
•added 2023/11/16 4:12 p.m.•7 views

CVE-2023-6019

A command injection existed in Ray's cpuprofile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here:...

9.8CVSS0.83942EPSS
SaveExploits23References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/16 12:00 a.m.•3 views

CVE-2023-6019: Improper Neutralization of Special Elements used in an OS Command

A command injection existed in Ray's cpuprofile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here:...

9.8CVSS7.7AI score0.7463EPSS
SaveExploits11References2
Rows per page
Query Builder