CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2023/10/31 3:15 p.m.•37 views

CVE-2023-42658

Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile...

8.8CVSS8.7AI score0.00283EPSS

SaveExploits0References3

Vulnrichment•added 2023/10/31 2:08 p.m.•19 views

CVE-2023-42658 InSpec Archive Command Vulnerable to Maliciously Crafted Profile

Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile...

8.8CVSS6.9AI score0.00283EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2023/10/31 12:00 a.m.•1 views

CVE-2023-40050: Improper Control of Generation of Code

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution...

9.9CVSS8.3AI score0.01184EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2023/10/31 12:00 a.m.•1 views

CVE-2023-42658: Improper Control of Generation of Code

Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile...

8.8CVSS7.4AI score0.00283EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by