An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.
References
| Link | Resource |
|---|---|
| https://docs.divvycloud.com/changelog/23321-release-notes | Release Notes |
| https://nephosec.com/exploiting-rapid7s-insightcloudsec/ | Exploit Third Party Advisory |
| https://docs.divvycloud.com/changelog/23321-release-notes | Release Notes |
| https://nephosec.com/exploiting-rapid7s-insightcloudsec/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://docs.divvycloud.com/changelog/23321-release-notes - Release Notes | |
| References | () https://nephosec.com/exploiting-rapid7s-insightcloudsec/ - Exploit, Third Party Advisory |
07 Nov 2023, 04:03
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec. |
Information
Published : 2023-03-21 17:15
Updated : 2024-11-21 07:38
NVD link : CVE-2023-1304
Mitre link : CVE-2023-1304
CVE.ORG link : CVE-2023-1304
JSON object : View
Products Affected
rapid7
- insightappsec
- insightcloudsec
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')