Automate Security Vulnerabilities - 2023

CVE-2023-40050

Upload profile eitherthrough API or user interface in Chef Automate prior to and including version 4.10.29 using InSpeccheck command with maliciously crafted profile allows remote code execution.