Lucene search
K

5 matches found

EUVD
EUVD
added 4 days ago5 views

EUVD-2026-33765

Authentication Bypass in cf-auth-proxy in Cloud Foundry Foundation all installations allows an unauthenticated remote attacker to gain read access to every log and metric for every application and platform component via minting a JWT that the cf-auth-proxy accepts as a valid logs.admin token...

7.5CVSS5.8AI score0.00058EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/13 3:23 a.m.1 views

EUVD-2025-177622

Malicious code in new-transpile-alpha-log-proxy npm...

6.6AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:41 a.m.6 views

CVE-2023-48023

Anyscale Ray 2.6.3 and 2.8.0 allows /logproxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment...

9.1CVSS6.8AI score0.89186EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2023/11/28 8:15 a.m.2 views

CVE-2023-48023

Anyscale Ray 2.6.3 and 2.8.0 allows /logproxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment...

9.1CVSS5.8AI score0.89186EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/11/28 12:0 a.m.2 views

PT-2023-30670 · Anyscale · Anyscale Ray

Name of the Vulnerable Software and Affected Versions: Anyscale Ray versions 2.6.3 through 2.8.0 Description: The issue allows for a Server-Side Request Forgery SSRF attack via the /log proxy endpoint. The vendor considers this report irrelevant, stating that Anyscale Ray is not intended for use...

9.1CVSS7.8AI score0.89186EPSS
Exploits1References13
Rows per page
Query Builder