An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.
References
| Link | Resource |
|---|---|
| https://docs.divvycloud.com/changelog/23321-release-notes | Release Notes |
| https://docs.divvycloud.com/changelog/23321-release-notes | Release Notes |
| https://nephosec.com/exploiting-rapid7s-insightcloudsec/ | Exploit Third Party Advisory |
| https://nephosec.com/exploiting-rapid7s-insightcloudsec/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Feb 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://nephosec.com/exploiting-rapid7s-insightcloudsec/ - Exploit, Third Party Advisory | |
| References | () https://docs.divvycloud.com/changelog/23321-release-notes - Release Notes |
07 Nov 2023, 04:03
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec. |
Information
Published : 2023-03-21 17:15
Updated : 2025-02-25 19:15
NVD link : CVE-2023-1304
Mitre link : CVE-2023-1304
JSON object : View
Products Affected
rapid7
- insightcloudsec
- insightappsec
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')