CVE-2023-42658
InSpec Archive Command Vulnerable to Maliciously Crafted Profile
Summary
InSpec Archive Command Vulnerable to Maliciously Crafted Profile
Original description
The description as published by the source.
Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.
References
- advisory community.progress.com
- advisory docs.chef.io
- advisory docs.chef.io
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web community.chef.io