CVE-2023-42658

HIGH

Chef InSpec <4.56.58, 5.22.29 - Command Injection

Title source: llm

Description

Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.

References (3)

Scores

CVSS v3 8.8
EPSS 0.0019
EPSS Percentile 40.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Classification

CWE
CWE-917 CWE-94
Status published

Affected Products (1)

chef/inspec < 4.56.58

Timeline

Published Oct 31, 2023
Tracked Since Feb 18, 2026