Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xg2h-7cxj-3gvh

Опубликовано: 12 фев. 2025
Источник: github
Github: Прошло ревью
CVSS3: 9.8

Описание

Withdrawn Advisory: Command injection in Ray

Withdrawn Advisory

This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022.

Original Description

An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script.

Пакеты

Наименование

ray

pip
Затронутые версииВерсия исправления

>= 2.9.3, <= 2.40.0

Отсутствует

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

nvd
12 месяцев назад

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-48022. Reason: This candidate is a duplicate of CVE-2023-48022. Notes: All CVE users should reference CVE-2023-48022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

9.8 Critical

CVSS3

Дефекты

CWE-94