CVE-2023-1304: Rapid7 InsightCloudSec getattr() method access
An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-1304?
CVE-2023-1304 is a vulnerability in Rapid7 InsightAppSec and Insightcloudsec that allows an authenticated attacker to smuggle OS commands and perform unauthorized actions.
What is the severity of CVE-2023-1304?
CVE-2023-1304 has a severity score of 8.8, which is considered high.
How can an attacker exploit CVE-2023-1304?
An attacker can exploit CVE-2023-1304 by leveraging an exposed getattr() method via a Jinja template to smuggle OS commands.
Which versions of Rapid7 InsightAppSec and Insightcloudsec are affected by CVE-2023-1304?
Rapid7 InsightAppSec versions up to but excluding 23.2.1 and Rapid7 Insightcloudsec versions up to but excluding 2023.02.01 are affected by CVE-2023-1304.
How was CVE-2023-1304 resolved?
CVE-2023-1304 was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-managed deployment.
Where can I find more information about CVE-2023-1304?
You can find more information about CVE-2023-1304 in the release notes of Rapid7 InsightAppSec and Insightcloudsec and in an article published by Nephosec.