PT-2023-8890 · Ray · Ray

Published 2023-08-25 · Updated 2024-03-27 · CVE-2023-6021

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ray (affected versions not specified)

Description The issue is related to incorrect restriction of a directory path with limited access in the Ray framework for scaling AI and Python applications. This can be exploited by a remote attacker to read arbitrary files using the filename parameter. The log API endpoint in Ray is also affected, allowing attackers to read any file on the server without authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

CWE-29

Related Identifiers

BDU:2024-02554

CVE-2023-6021

GHSA-3PWW-QVR8-6MHP

Affected Products

Ray

References · 18

• 🔥 https://huntr.com/bounties/5039c045-f986-4cbc-81ac-370fe4b0d3f8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-6021 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6021 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02554 · Security Note
• https://osv.dev/vulnerability/GHSA-3pww-qvr8-6mhp · Vendor Advisory
• https://github.com/ray-project/ray · Note
• https://github.com/ray-project/ray/releases/tag/ray-2.8.1 · Note
• https://t.me/cvenotify/62593 · Telegram Post
• https://t.me/cvenotify/62619 · Telegram Post
• https://t.me/cvenotify/61431 · Telegram Post
• https://t.me/cvenotify/61127 · Telegram Post
• https://t.me/cvenotify/62620 · Telegram Post
• https://t.me/true_secator/5575 · Telegram Post
• https://anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023 · Note
• https://t.me/cvenotify/62591 · Telegram Post