CVE-2023-1306: Rapid7 InsightCloudSec resource.db() method access
An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.
Affected Software
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
CVE-2023-1306
What is the severity level of CVE-2023-1306?
The severity level of CVE-2023-1306 is high, with a value of 8.8.
How can an attacker exploit CVE-2023-1306?
An authenticated attacker can exploit CVE-2023-1306 by leveraging an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution.
Which versions of Rapid7 InsightAppSec are affected by CVE-2023-1306?
CVE-2023-1306 affects versions up to and exclusive of 23.2.1 of Rapid7 InsightAppSec Self-Managed.
Which deployments of Rapid7 Insightcloudsec are affected by CVE-2023-1306?
CVE-2023-1306 affects Managed and SaaS deployments of Rapid7 Insightcloudsec up to and exclusive of version 2023.02.01.