CVE-2023-40050

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-40050
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40050.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-40050
Published
2023-10-31T14:07:59Z
Modified
2026-10-28T02:31:07Z
Severity
  • 9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application
Details

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution.

Database specific 
{
    "cna_assigner":  "ProgressSoftware",
    "cwe_ids":  [
        "CWE-434",
        "CWE-94"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40050.json"
}
References

Affected packages

Git / github.com/chef/automate

Affected ranges

Type
GIT
Repo
https://github.com/chef/automate
Events
Introduced
7bc61c4f4f1f49abd32f8dca57a4c2720fa76ba1
Last Affected
98981657948fc0a85a0d72556c8a6d447ca143d4
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "4.0.0"
                },
                {
                    "last_affected":  "4.10.29"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "cpe":  "cpe:2.3:a:chef:automate:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "4.10.29"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

4.*
4.0.0
4.0.1
4.0.10
4.0.100
4.0.101
4.0.102
4.0.103
4.0.104
4.0.105
4.0.106
4.0.107
4.0.108
4.0.109
4.0.11
4.0.12
4.0.13
4.0.14
4.0.15
4.0.16
4.0.17
4.0.18
4.0.19
4.0.2
4.0.20
4.0.21
4.0.22
4.0.23
4.0.24
4.0.25
4.0.26
4.0.27
4.0.27-released
4.0.28
4.0.29
4.0.3
4.0.30
4.0.31
4.0.32
4.0.33
4.0.34
4.0.35
4.0.36
4.0.37
4.0.38
4.0.39
4.0.4
4.0.40
4.0.41
4.0.42
4.0.43
4.0.44
4.0.45
4.0.46
4.0.47
4.0.48
4.0.49
4.0.5
4.0.50
4.0.51
4.0.52
4.0.53
4.0.54
4.0.54-released
4.0.55
4.0.56
4.0.57
4.0.58
4.0.59
4.0.6
4.0.60
4.0.61
4.0.62
4.0.63
4.0.64
4.0.65
4.0.66
4.0.67
4.0.68
4.0.69
4.0.7
4.0.70
4.0.71
4.0.72
4.0.73
4.0.74
4.0.75
4.0.76
4.0.77
4.0.78
4.0.79
4.0.8
4.0.80
4.0.81
4.0.82
4.0.83
4.0.84
4.0.85
4.0.86
4.0.87
4.0.88
4.0.89
4.0.9
4.0.90
4.0.91
4.0.91-released
4.0.92
4.0.93
4.0.94
4.0.95
4.0.96
4.0.97
4.0.98
4.0.99
4.1.0
4.1.1
4.1.1-released
4.1.2
4.1.3
4.1.3-released
4.1.4
4.1.5
4.10.0
4.10.1
4.10.1-released
4.10.10
4.10.11
4.10.12
4.10.13
4.10.14
4.10.15
4.10.16
4.10.17
4.10.18
4.10.19
4.10.2
4.10.20
4.10.21
4.10.22
4.10.23
4.10.24
4.10.25
4.10.26
4.10.27
4.10.28
4.10.29
4.10.29-released
4.10.3
4.10.4
4.10.5
4.10.6
4.10.7
4.10.8
4.10.9
4.2.0
4.2.1
4.2.10
4.2.10-released
4.2.100
4.2.101
4.2.102
4.2.103
4.2.104
4.2.105
4.2.106
4.2.107
4.2.108
4.2.109
4.2.11
4.2.12
4.2.13
4.2.14
4.2.15
4.2.16
4.2.17
4.2.18
4.2.19
4.2.2
4.2.20
4.2.21
4.2.22
4.2.22-released
4.2.23
4.2.24
4.2.25
4.2.27
4.2.28
4.2.29
4.2.3
4.2.30
4.2.31
4.2.32
4.2.33
4.2.34
4.2.35
4.2.36
4.2.37
4.2.38
4.2.39
4.2.4
4.2.40
4.2.41
4.2.42
4.2.43
4.2.44
4.2.45
4.2.46
4.2.47
4.2.47-released
4.2.48
4.2.49
4.2.5
4.2.50
4.2.51
4.2.52
4.2.53
4.2.54
4.2.55
4.2.56
4.2.57
4.2.58
4.2.59
4.2.59-released
4.2.6
4.2.60
4.2.61
4.2.62
4.2.63
4.2.64
4.2.65
4.2.66
4.2.67
4.2.68
4.2.69
4.2.7
4.2.70
4.2.71
4.2.72
4.2.73
4.2.74
4.2.75
4.2.76
4.2.77
4.2.78
4.2.79
4.2.8
4.2.80
4.2.81
4.2.82
4.2.83
4.2.84
4.2.85
4.2.86
4.2.87
4.2.88
4.2.89
4.2.9
4.2.90
4.2.91
4.2.92
4.2.93
4.2.94
4.2.95
4.2.96
4.2.97
4.2.98
4.2.99
4.3.0
4.3.0-released
4.3.1
4.3.10
4.3.11
4.3.12
4.3.13
4.3.14
4.3.16
4.3.17
4.3.18
4.3.19
4.3.2
4.3.20
4.3.21
4.3.22
4.3.23
4.3.24
4.3.25
4.3.26
4.3.27
4.3.28
4.3.29
4.3.3
4.3.30
4.3.31
4.3.32
4.3.33
4.3.34
4.3.35
4.3.36
4.3.37
4.3.38
4.3.39
4.3.4
4.3.40
4.3.41
4.3.42
4.3.43
4.3.44
4.3.45
4.3.46
4.3.47
4.3.48
4.3.49
4.3.5
4.3.50
4.3.51
4.3.52
4.3.53
4.3.54
4.3.55
4.3.56
4.3.57
4.3.58
4.3.59
4.3.6
4.3.60
4.3.61
4.3.62
4.3.63
4.3.64
4.3.65
4.3.66
4.3.67
4.3.68
4.3.69
4.3.7
4.3.70
4.3.71
4.3.72
4.3.73
4.3.74
4.3.75
4.3.76
4.3.77
4.3.78
4.3.79
4.3.8
4.3.80
4.3.81
4.3.82
4.3.9
4.4.0
4.4.1
4.4.10
4.4.10-released
4.4.11
4.4.12
4.4.13
4.4.14
4.4.15
4.4.16
4.4.17
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
4.5.0
4.5.1
4.5.10
4.5.100
4.5.101
4.5.102
4.5.103
4.5.104
4.5.105
4.5.106
4.5.107
4.5.108
4.5.109
4.5.11
4.5.110
4.5.111
4.5.112
4.5.113
4.5.114
4.5.115
4.5.116
4.5.117
4.5.118
4.5.119
4.5.12
4.5.120
4.5.121
4.5.122
4.5.123
4.5.124
4.5.125
4.5.126
4.5.127
4.5.128
4.5.129
4.5.13
4.5.130
4.5.131
4.5.132
4.5.133
4.5.134
4.5.135
4.5.136
4.5.137
4.5.138
4.5.139
4.5.14
4.5.140
4.5.141
4.5.142
4.5.143
4.5.144
4.5.145
4.5.146
4.5.147
4.5.148
4.5.149
4.5.15
4.5.150
4.5.151
4.5.152
4.5.153
4.5.154
4.5.155
4.5.156
4.5.157
4.5.158
4.5.159
4.5.16
4.5.160
4.5.161
4.5.162
4.5.163
4.5.164
4.5.165
4.5.166
4.5.167
4.5.168
4.5.169
4.5.17
4.5.170
4.5.171
4.5.172
4.5.173
4.5.174
4.5.175
4.5.176
4.5.177
4.5.177-released
4.5.178
4.5.179
4.5.18
4.5.180
4.5.181
4.5.182
4.5.183
4.5.184
4.5.185
4.5.186
4.5.187
4.5.188
4.5.189
4.5.19
4.5.190
4.5.191
4.5.192
4.5.193
4.5.194
4.5.195
4.5.196
4.5.197
4.5.2
4.5.2-released
4.5.20
4.5.21
4.5.22
4.5.23
4.5.24
4.5.25
4.5.26
4.5.27
4.5.28
4.5.29
4.5.3
4.5.30
4.5.31
4.5.32
4.5.33
4.5.34
4.5.35
4.5.36
4.5.37
4.5.37-released
4.5.38
4.5.39
4.5.4
4.5.40
4.5.41
4.5.42
4.5.43
4.5.44
4.5.45
4.5.46
4.5.47
4.5.48
4.5.49
4.5.5
4.5.50
4.5.51
4.5.52
4.5.53
4.5.54
4.5.55
4.5.56
4.5.57
4.5.58
4.5.59
4.5.6
4.5.60
4.5.61
4.5.62
4.5.63
4.5.64
4.5.65
4.5.66
4.5.67
4.5.68
4.5.69
4.5.7
4.5.70
4.5.71
4.5.72
4.5.73
4.5.74
4.5.75
4.5.76
4.5.77
4.5.78
4.5.79
4.5.8
4.5.81
4.5.82
4.5.83
4.5.84
4.5.85
4.5.86
4.5.87
4.5.88
4.5.89
4.5.9
4.5.90
4.5.91
4.5.92
4.5.93
4.5.94
4.5.95
4.5.96
4.5.97
4.5.98
4.5.99
4.6.0
4.7.0
4.7.1
4.7.10
4.7.100
4.7.101
4.7.102
4.7.103
4.7.104
4.7.105
4.7.106
4.7.107
4.7.108
4.7.109
4.7.11
4.7.110
4.7.111
4.7.112
4.7.113
4.7.114
4.7.115
4.7.116
4.7.117
4.7.118
4.7.119
4.7.12
4.7.120
4.7.121
4.7.122
4.7.123
4.7.124
4.7.125
4.7.126
4.7.127
4.7.128
4.7.129
4.7.13
4.7.130
4.7.131
4.7.132
4.7.133
4.7.134
4.7.135
4.7.136
4.7.137
4.7.138
4.7.139
4.7.14
4.7.140
4.7.141
4.7.142
4.7.143
4.7.144
4.7.145
4.7.146
4.7.147
4.7.148
4.7.149
4.7.15
4.7.150
4.7.151
4.7.152
4.7.153
4.7.154
4.7.155
4.7.156
4.7.157
4.7.158
4.7.159
4.7.16
4.7.160
4.7.161
4.7.162
4.7.163
4.7.164
4.7.165
4.7.166
4.7.167
4.7.168
4.7.169
4.7.17
4.7.170
4.7.171
4.7.172
4.7.173
4.7.174
4.7.175
4.7.176
4.7.177
4.7.178
4.7.179
4.7.18
4.7.180
4.7.181
4.7.182
4.7.183
4.7.184
4.7.185
4.7.186
4.7.187
4.7.188
4.7.189
4.7.19
4.7.190
4.7.191
4.7.192
4.7.193
4.7.194
4.7.195
4.7.196
4.7.197
4.7.198
4.7.199
4.7.2
4.7.20
4.7.200
4.7.201
4.7.202
4.7.203
4.7.204
4.7.205
4.7.206
4.7.207
4.7.208
4.7.209
4.7.21
4.7.210
4.7.211
4.7.212
4.7.213
4.7.214
4.7.215
4.7.216
4.7.217
4.7.218
4.7.219
4.7.22
4.7.220
4.7.221
4.7.222
4.7.223
4.7.224
4.7.225
4.7.226
4.7.227
4.7.228
4.7.229
4.7.23
4.7.230
4.7.231
4.7.232
4.7.233
4.7.234
4.7.235
4.7.236
4.7.237
4.7.238
4.7.239
4.7.24
4.7.240
4.7.25
4.7.26
4.7.27
4.7.28
4.7.29
4.7.3
4.7.30
4.7.31
4.7.32
4.7.33
4.7.34
4.7.35
4.7.36
4.7.37
4.7.38
4.7.39
4.7.4
4.7.40
4.7.41
4.7.42
4.7.43
4.7.44
4.7.45
4.7.46
4.7.47
4.7.48
4.7.49
4.7.5
4.7.50
4.7.51
4.7.52
4.7.52-released
4.7.53
4.7.54
4.7.55
4.7.56
4.7.57
4.7.58
4.7.59
4.7.6
4.7.60
4.7.61
4.7.62
4.7.63
4.7.64
4.7.65
4.7.66
4.7.67
4.7.68
4.7.69
4.7.7
4.7.70
4.7.71
4.7.72
4.7.73
4.7.74
4.7.75
4.7.76
4.7.77
4.7.78
4.7.79
4.7.8
4.7.80
4.7.81
4.7.82
4.7.83
4.7.84
4.7.85
4.7.86
4.7.87
4.7.88
4.7.89
4.7.9
4.7.90
4.7.91
4.7.92
4.7.93
4.7.94
4.7.95
4.7.96
4.7.97
4.7.98
4.7.99
4.8.0
4.9.0
4.9.1
4.9.10
4.9.100
4.9.101
4.9.102
4.9.103
4.9.104
4.9.105
4.9.106
4.9.107
4.9.108
4.9.109
4.9.11
4.9.110
4.9.111
4.9.112
4.9.113
4.9.114
4.9.115
4.9.116
4.9.117
4.9.118
4.9.119
4.9.12
4.9.13
4.9.14
4.9.15
4.9.16
4.9.17
4.9.18
4.9.19
4.9.2
4.9.20
4.9.21
4.9.22
4.9.23
4.9.24
4.9.25
4.9.26
4.9.27
4.9.28
4.9.29
4.9.3
4.9.30
4.9.31
4.9.32
4.9.33
4.9.34
4.9.35
4.9.36
4.9.37
4.9.38
4.9.39
4.9.4
4.9.40
4.9.41
4.9.42
4.9.43
4.9.44
4.9.45
4.9.46
4.9.47
4.9.48
4.9.49
4.9.5
4.9.50
4.9.51
4.9.52
4.9.53
4.9.54
4.9.55
4.9.56
4.9.57
4.9.58
4.9.59
4.9.6
4.9.60
4.9.61
4.9.62
4.9.63
4.9.65
4.9.66
4.9.67
4.9.68
4.9.69
4.9.7
4.9.70
4.9.71
4.9.72
4.9.73
4.9.74
4.9.75
4.9.76
4.9.77
4.9.78
4.9.79
4.9.8
4.9.80
4.9.81
4.9.82
4.9.83
4.9.84
4.9.85
4.9.86
4.9.87
4.9.88
4.9.89
4.9.9
4.9.9-released
4.9.91
4.9.92
4.9.93
4.9.94
4.9.95
4.9.96
4.9.97
4.9.98
4.9.99
Other
hab-pkg-automate-workflow-nginx

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40050.json"