5 matches found
CVE-2023-42658
Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile...
8.8CVSS8.7AI score0.00283EPSS
SaveExploits0References3
CVE-2023-42658 InSpec Archive Command Vulnerable to Maliciously Crafted Profile
Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile...
8.8CVSS6.9AI score0.00283EPSS
SaveExploits0References3
CVE-2023-42658
CVE-2023-42658 affects Chef InSpec. Vulnerable in versions prior to 4.56.58 and 5.22.29 , where maliciously crafted profiles can trigger local command execution via the archive, check, and export commands. Remediation: upgrade to 4.56.58+ or 5.22.29+. See PT-2023-28487 for details on affected com...
8.8CVSS7.9AI score0.00283EPSS
SaveExploits0References3Affected Software1
20