Vulnerability · Published Mar 21, 2023 · Assigned by rapid7
CVE-2023-1305Rapid7 InsightCloudSec box object access
High 8.1
In plain English
A high-severity security flaw in InsightCloudSec from Rapid7. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.8%top 44.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided those files can be parsed as yaml or JSON. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rapid7 | InsightCloudSec | 0 – through 23.2.0 |
Weakness: CWE-653 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
References
- https://docs.divvycloud.com/changelog/23321-release-notes release-notes
- https://nephosec.com/exploiting-rapid7s-insightcloudsec/ third-party-advisory