{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-48022", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-10-28T16:10:47.152927", "dateReserved": "2023-11-13T00:00:00", "datePublished": "2023-11-28T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-10-28T16:10:47.152927"}, "descriptions": [{"lang": "en", "value": "Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment"}], "tags": ["disputed"], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0"}, {"url": "https://docs.ray.io/en/latest/ray-security/index.html"}, {"url": "https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit"}, {"url": "https://atlas.mitre.org/studies/AML.CS0023"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-918", "lang": "en", "description": "CWE-918 Server-Side Request Forgery (SSRF)"}]}], "affected": [{"vendor": "anyscale", "product": "ray", "cpes": ["cpe:2.3:a:anyscale:ray:2.6.3:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.6.3", "status": "affected"}]}, {"vendor": "anyscale", "product": "ray", "cpes": ["cpe:2.3:a:anyscale:ray:2.8.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.8.0", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-03-29T04:00:12.125164Z", "id": "CVE-2023-48022", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-12T20:30:40.072Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-19T07:48:03.111Z"}, "title": "CVE Program Container", "references": [{"url": "https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0", "tags": ["x_transferred"]}, {"url": "https://docs.ray.io/en/latest/ray-security/index.html", "tags": ["x_transferred"]}, {"url": "https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit", "tags": ["x_transferred"]}, {"url": "https://www.vicarius.io/vsociety/posts/the-story-of-shadowray-cve-2023-48022"}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0", "tags": ["x_transferred"]}, {"url": "https://docs.ray.io/en/latest/ray-security/index.html", "tags": ["x_transferred"]}, {"url": "https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit", "tags": ["x_transferred"]}, {"url": "https://www.vicarius.io/vsociety/posts/the-story-of-shadowray-cve-2023-48022"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-19T07:48:03.111Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-48022", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-03-29T04:00:12.125164Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:anyscale:ray:2.6.3:*:*:*:*:*:*:*"], "vendor": "anyscale", "product": "ray", "versions": [{"status": "affected", "version": "2.6.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:anyscale:ray:2.8.0:*:*:*:*:*:*:*"], "vendor": "anyscale", "product": "ray", "versions": [{"status": "affected", "version": "2.8.0"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-12T20:28:24.337Z"}}], "cna": {"tags": ["disputed"], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0"}, {"url": "https://docs.ray.io/en/latest/ray-security/index.html"}, {"url": "https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit"}, {"url": "https://atlas.mitre.org/studies/AML.CS0023"}], "descriptions": [{"lang": "en", "value": "Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-10-28T16:10:47.152927"}}}, "cveMetadata": {"cveId": "CVE-2023-48022", "state": "PUBLISHED", "dateUpdated": "2024-10-28T16:10:47.152927", "dateReserved": "2023-11-13T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-11-28T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:anyscale:ray:2.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "1083D908-E7F7-44BE-89CD-B760224C5585", "vulnerable": true}, {"criteria": "cpe:2.3:a:anyscale:ray:2.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "DE882370-6570-49E0-A11F-95D3FBCD4714", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [{"sourceIdentifier": "[email protected]", "tags": ["disputed"]}], "descriptions": [{"lang": "en", "value": "Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment"}, {"lang": "es", "value": "Anyscale Ray 2.6.3 y 2.8.0 permite a un atacante remoto ejecutar c\u00f3digo arbitrario a trav\u00e9s de la API de env\u00edo de trabajos. NOTA: la posici\u00f3n del proveedor es que este informe es irrelevante porque Ray, como se indica en su documentaci\u00f3n, no est\u00e1 manipulado para su uso fuera de un entorno de red estrictamente controlado."}], "id": "CVE-2023-48022", "lastModified": "2024-11-21T08:31:00.343", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-11-28T08:15:06.910", "references": [{"source": "[email protected]", "url": "https://atlas.mitre.org/studies/AML.CS0023"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0"}, {"source": "[email protected]", "tags": ["Product", "Release Notes"], "url": "https://docs.ray.io/en/latest/ray-security/index.html"}, {"source": "[email protected]", "url": "https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "Release Notes"], "url": "https://docs.ray.io/en/latest/ray-security/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.vicarius.io/vsociety/posts/the-story-of-shadowray-cve-2023-48022"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "[email protected]", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-918"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}