CVE-2023-6020

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication...

CVE-2023-6020

creationtimestamp| type| source ---|---|--- 2023-11-25 12:14:52+00:00| published-proof-of-concept| Telegram/B3MfWlGpx-qQr-PJTpFgE5RGDaIYA5WKuQnODf6UIO8APlw 2024-03-27 17:30:05+00:00| exploited| https://t.me/truesecator/5575 2024-08-23 09:26:17+00:00| seen|...

CVE-2023-6020

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication...

CVE-2023-6020

CVE-2023-6020 corresponds to a local file inclusion (LFI) in Ray, allowing unauthenticated readers to traverse the /static/ directory and read arbitrary server files. The Nuclei template and related advisories describe the vulnerability as a path traversal issue in Ray’s static/file serving behav...