Vulnerabilities of ray-project ray-project/ray
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-6020 | LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication | 7.5 High | Nov 16, 2023 |
| CVE-2023-6019 | A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system… | 9.8 Critical | Nov 16, 2023 |
| CVE-2023-6021 | LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication | 7.5 High | Nov 16, 2023 |