github.com
https://github.com/Kong/insomnia/pull/6217/commits CVE-2023-40299
HIGH
Record summary
CVE-2023-40299 has a selected CVSS score of 7.8 (high).
Description
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 20, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Default status: unknown | CVE List | Before * | affected |
References
5github.com
https://github.com/Kong/insomnia/releases insomnia.rest
https://insomnia.rest/changelog nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-40299 angelystor.com
https://www.angelystor.com/posts/cve-2023-40299