Rapid7 Insightcloudsec — known CVE vulnerabilities

Every CVE whose affected-product data names Rapid7 Insightcloudsec, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-1304 — CVSS 8.8 (high): An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions…
• CVE-2023-1306 — CVSS 8.8 (high): An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which…
• CVE-2023-1305 — CVSS 8.1 (high): An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided those files can be…