CVE-2023-48022
CRITICAL EXPLOITED NUCLEIAnyscale Ray 2.6.3 and 2.8.0 - Remote Code Execution via Job Submission API
Title source: llmExploitation Summary
CVE-2023-48022 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including jakabakos, 0x656565, sierrabearchell, byt3bl33d3r <[email protected]>, Takahiro Yokoyama, including a Metasploit module exploits/linux/http/ray_agent_job_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-48022, a remote command execution vulnerability in the Ray framework's job submission API. The exploit includes both a Python script and a Metasploit module to execute arbitrary commands on vulnerable Ray instances.
Description
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment. (Also, within that environment, customers at version 2.52.0 and later can choose to use token authentication.)
Exploits (3)
This repository contains a functional exploit for CVE-2023-48022, a remote command execution vulnerability in the Ray framework's job submission API. The exploit includes both a Python script and a Metasploit module to execute arbitrary commands on vulnerable Ray instances.
This repository contains a functional exploit for CVE-2023-48022, leveraging Ray's job submission API to execute arbitrary commands on a remote Ray cluster. The exploit submits a job that reads a file from the target system, demonstrating remote code execution (RCE).
This Metasploit module exploits an RCE vulnerability in Ray via the agent job submission endpoint, which lacks authentication by default. It submits arbitrary commands through the API to achieve remote code execution.
Nuclei Templates (1)
http.favicon.hash:463802404 || http.html:"ray dashboard"
icon_hash=463802404 || body="ray dashboard"
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H