Ray Project/Ray
Approved changes feed: RSS · Atom
cpe:2.3:a:ray-project:ray-project/ray:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ray Project (2e70fc26-91b5-5697-afcf-54f29554cd90) |
|---|---|
| Product | Ray Project/Ray (c09a4705-fc55-574d-951b-dbdc0d32408b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6021 |
vulnerable | 2026-06-08 06:19:45.412372 |
Ray Log File Local File Include
HIGH (7.5)
LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
Published: 2023-11-16T16:11:42.969Z
Updated: 2024-11-27T17:07:03.555Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6020 |
vulnerable | 2026-06-08 06:19:45.411970 |
Ray Static File Local File Include
HIGH (7.5)
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.
Published: 2023-11-16T21:07:33.774Z
Updated: 2024-08-02T08:21:17.152Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6019 |
vulnerable | 2026-06-08 06:19:45.410719 |
Ray Command Injection in cpu_profile Parameter
CRITICAL (9.8)
A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
Published: 2023-11-16T16:12:07.652Z
Updated: 2024-08-02T08:21:17.025Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.