CVE-2024-57000: Code Injection
Withdrawn Advisory This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022.
Original Description An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script.
Other sources
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-48022. Reason: This candidate is a duplicate of CVE-2023-48022. Notes: All CVE users should reference CVE-2023-48022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57000?
CVE-2024-57000 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-57000?
To mitigate CVE-2024-57000, upgrade AnyScale Ray to a version outside the affected range, specifically above 2.40.0.
What versions of Anyscale Ray are affected by CVE-2024-57000?
CVE-2024-57000 affects Anyscale Ray versions between 2.9.3 and 2.40.0.
Can CVE-2024-57000 be exploited by local users?
No, CVE-2024-57000 is a remote code execution vulnerability and requires the attacker to send a crafted script.
Is CVE-2024-57000 a standalone vulnerability?
No, CVE-2024-57000 is a duplicate of CVE-2023-48022 and should not be used as a standalone reference.