High severity · published Mar 21, 2023
CVE-2023-1305
Rapid7 InsightCloudSec box object access
8.1
CVSS
0.8%
EPSS
No
On KEV
Description
An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided those files can be parsed as yaml or JSON. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
InsightCloudSec · Rapid7
through 23.2.0 · source: vendor, NVD
IN
Insightappsec · Rapid7
before 23.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-1305
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-1305
Release Notes
https://docs.divvycloud.com/changelog/23321-release-notes
Exploit
https://nephosec.com/exploiting-rapid7s-insightcloudsec/
More from InsightCloudSec
8.8
CVE-2023-1306
Rapid7 InsightCloudSec resource.db() method access
8.8
CVE-2023-1304
Rapid7 InsightCloudSec getattr() method access