{"id":"CVE-2023-48023","published":"2023-11-28T00:00:00Z","modified":"2024-10-10T20:23:31Z","title":"Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is a Server-Side Request Forgery (SSRF) vulnerability in the /log_proxy endpoint of Anyscale Ray, affecting versions 2.6.3 and 2.8.0. An attacker with network access can exploit it without authentication or user interaction to make the server issue requests to arbitrary destinations; the vendor notes that Ray is documented as intended only for strictly controlled network environments.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:33Z"},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.35296,"percentile":0.98445,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[{"id":"CWE-918","name":"Server-Side Request Forgery"}],"references":[{"url":"https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0","tags":[]},{"url":"https://docs.ray.io/en/latest/ray-security/index.html","tags":[]}],"techniques":[],"reports":[{"id":"SRC-21b639fa149328c86d0e","title":"ShadowRay: First Known Attack Campaign Targeting AI Workloads Exploited In The Wild","publisher":"oligo.security","url":"https://www.oligo.security/blog/shadowray-attack-ai-workloads-actively-exploited-in-the-wild","date":null,"mentions":[{"quote":"https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023‍[2] https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0‍[3] https://huntr.com/bounties/787a07c0-5535-469f-8c53-3efa4e5717c7/‍[4]","start":25028,"end":25277}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-52112","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52112","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2023-48023","name":"Anyscale Ray 2.6.3 and 2.8.0 - Server-Side Request Forgery","severity":"critical","path":"http/cves/2023/CVE-2023-48023.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48023.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-11-28","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-48023","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":34.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.69,"detail":"percentile 0.9845"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.37,"detail":"base score 9.1"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}