← Back to browse · API

CVE-2023-48023

Severity
CRITICAL
CVSS
9.1
EPSS
0.35052
Risk score
48.67
CISA KEV
No
PoC
No
Published
2023-11-28
Modified
2024-10-10
First seen
2026-08-07
Aliases
EUVD-2023-52112, GHSA-3XQF-MVHG-35J8
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-52112

Description

Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment

References