CVE-2023-6020
Ray Static File Local File Include
HIGH 7.5EPSS 14.7%
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.
- Affected
- ray-project · ray-project/ray
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v3.0 HUNTR
- 7.5 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v3.0 GitHub
- 9.3 CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N - EPSS
- 14.65% chance of exploitation in the next 30 days, 97th percentile
- Nuclei
- high · CWE-862
- Published
- 2023-11-16
- Updated
- 2024-08-02