CVE-2023-42658
InSpec Archive Command Vulnerable to Maliciously Crafted Profile
Résumé
InSpec Archive Command Vulnerable to Maliciously Crafted Profile
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.
Références
- advisory community.progress.com
- advisory docs.chef.io
- advisory docs.chef.io
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web community.chef.io