Chef

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Chef records in CISA KEV

No Chef vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Inspec · all components

TI-2023-22762 CVE-2023-42658 · GHSA-x626-c49h-fr9m

MEDIUM 40

Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00294 Published 2023-10-31 Fixed in 4.56.58 , 5.22.29 CWE-917