Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion ray/CVE-2023-48022/README.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,11 @@
# CVE-2023-48022 ray RCE
This directory contains the deployment configs for ray in a configuration
vulnerable to CVE-2023-48022.
The deployed service has name `cve-2023-48022` and listens on port `80`.
The deployed service has name `cve-2023-48022` and listens on port `80`.

## Docker Compose
Requires a linux/amd64 machine. For some reason the job worker crashed on ARM/new Macbook.
```
docker compose up
```
The vulnerable service is on port 8081. There is no non-vulnerable service because the vendor said that it must be restricted.
12 changes: 12 additions & 0 deletions ray/CVE-2023-48022/docker-compose.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
version: "3.8"

services:
cve-2023-48022:
image: rayproject/ray:2.5.0@sha256:cb53dcc21af8f913978fd2a3fc57c812f87d99e0b40db6a42ccd6f43eca11281
container_name: cve-2023-48022
shm_size: "2.40gb"
ports:
- "8081:8265"
command: >
/bin/bash -c "ray start --head --dashboard-host=0.0.0.0 --include-dashboard=true && tail -f /dev/null"
restart: unless-stopped