{"id":"CVE-2023-40050","summary":"Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application","details":"Upload profile either\nthrough API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec\ncheck command with maliciously crafted profile allows remote code execution. \n\n\n\n\n\n\n\n\n\n\n\n","modified":"2026-08-12T03:51:14.201417411Z","published":"2023-10-31T14:07:59.881Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40050.json","cna_assigner":"ProgressSoftware","cwe_ids":["CWE-434","CWE-94"]},"references":[{"type":"WEB","url":"https://www.chef.io/downloads"},{"type":"ADVISORY","url":"https://community.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Automate-CVE-2023-40050"},{"type":"ADVISORY","url":"https://docs.chef.io/automate/profiles/"},{"type":"ADVISORY","url":"https://docs.chef.io/release_notes_automate/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40050.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40050"},{"type":"PACKAGE","url":"https://github.com/chef/automate"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/chef/automate","events":[{"introduced":"7bc61c4f4f1f49abd32f8dca57a4c2720fa76ba1"},{"last_affected":"98981657948fc0a85a0d72556c8a6d447ca143d4"}],"database_specific":{"cpe":"cpe:2.3:a:chef:automate:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.0.0"},{"last_affected":"4.10.29"},{"introduced":"0"}],"source":["AFFECTED_FIELD","CPE_RANGE"]}}],"versions":["4.10.29-released","4.10.29","4.10.28","4.10.27","4.10.26","4.10.25","4.10.24","4.10.23","4.10.22","4.10.21","4.10.20","4.10.19","4.10.18","4.10.17","4.10.16","4.10.15","4.10.14","4.10.13","4.10.12","4.10.11","4.10.10","4.10.9","4.10.8","4.10.7","4.10.6","4.10.5","4.10.4","4.9.115","4.10.3","4.10.2","4.10.1-released","4.10.1","4.10.0","4.9.119","4.9.118","4.9.117","4.9.116","4.9.114","4.9.113","4.9.112","4.9.111","4.9.110","4.9.109","4.9.108","4.9.107","4.9.106","4.9.105","4.9.104","4.9.103","4.9.102","4.9.101","4.9.91","4.9.100","4.9.99","4.9.98","4.9.97","4.9.96","4.9.95","4.9.94","4.9.93","4.9.92","4.9.89","4.9.88","4.9.87","4.9.86","4.9.85","4.9.84","4.9.83","4.9.82","4.9.81","4.9.80","4.9.79","4.9.78","4.9.77","4.9.76","4.9.75","4.9.74","4.9.73","4.9.72","4.9.71","4.9.70","4.9.69","4.9.68","4.9.67","4.9.66","4.9.65","4.9.63","4.9.62","4.9.58","4.9.61","4.9.60","4.9.59","4.9.57","4.9.56","4.9.55","4.9.54","4.9.53","4.9.52","4.9.51","4.9.50","4.9.49","4.9.48","4.9.47","4.9.46","4.9.45","4.9.44","4.9.43","4.9.42","4.9.41","4.9.40","4.9.39","4.9.38","4.9.37","4.9.36","4.9.35","4.9.34","4.9.33","4.9.32","4.9.31","4.9.30","4.9.29","4.9.28","4.9.27","4.9.26","4.9.25","4.9.24","4.9.23","4.9.22","4.9.18","4.9.21","4.9.20","4.9.19","4.9.17","4.9.16","4.9.15","4.9.14","4.9.13","4.9.12","4.9.11","4.9.10","4.9.9-released","4.9.9","4.9.8","4.9.7","4.9.6","4.9.5","4.9.4","4.9.3","4.9.2","4.9.1","4.9.0","4.8.0","4.7.240","4.7.239","4.7.238","4.7.237","4.7.236","4.7.235","4.7.234","4.7.233","4.7.232","4.7.231","4.7.230","4.7.229","4.7.228","4.7.227","4.7.226","4.7.225","4.7.224","4.7.223","4.7.222","4.7.221","4.7.220","4.7.219","4.7.218","4.7.217","4.7.216","4.7.215","4.7.214","4.7.213","4.7.212","4.7.211","4.7.210","4.7.209","4.7.208","4.7.207","4.7.206","4.7.205","4.7.204","4.7.203","4.7.202","4.7.201","4.7.200","4.7.199","4.7.198","4.7.197","4.7.196","4.7.195","4.7.194","4.7.193","4.7.192","4.7.191","4.7.190","4.7.189","4.7.188","4.7.187","4.7.186","4.7.185","4.7.184","4.7.183","4.7.182","4.7.181","4.7.180","4.7.179","4.7.178","4.7.177","4.7.176","4.7.175","4.7.174","4.7.173","4.7.172","4.7.171","4.7.170","4.7.169","4.7.168","4.7.167","4.7.166","4.7.165","4.7.164","4.7.163","4.7.162","4.7.161","4.7.160","4.7.159","4.7.158","4.7.157","4.7.156","4.7.155","4.7.154","4.7.153","4.7.152","4.7.151","4.7.150","4.7.149","4.7.148","4.7.147","4.7.146","4.7.145","4.7.144","4.7.143","4.7.142","4.7.141","4.7.140","4.7.139","4.7.138","4.7.137","4.7.136","4.7.135","4.7.134","4.7.133","4.7.132","4.7.131","4.7.130","4.7.129","4.7.128","4.7.127","4.7.126","4.7.125","4.7.124","4.7.123","4.7.122","4.7.121","4.7.120","4.7.119","4.7.118","4.7.117","4.7.116","4.7.115","4.7.114","4.7.113","4.7.112","4.7.111","4.7.110","4.7.109","4.7.108","4.7.107","4.7.106","4.7.105","4.7.104","4.7.103","4.7.102","4.7.101","4.7.100","4.7.99","4.7.98","4.7.97","4.7.96","4.7.95","4.7.94","4.7.93","4.7.92","4.7.91","4.7.90","4.7.89","4.7.88","4.7.87","4.7.86","4.7.85","4.7.84","4.7.83","4.7.82","4.7.81","4.7.80","4.7.79","4.7.63","4.7.78","4.7.77","4.7.76","4.7.75","4.7.74","4.7.73","4.7.72","4.7.71","4.7.70","4.7.69","4.7.68","4.7.67","4.7.66","4.7.65","4.7.64","4.7.62","4.7.61","4.7.60","4.7.59","4.7.58","4.7.57","4.7.55","4.7.56","4.7.54","4.7.53","4.7.52-released","4.7.52","4.7.51","4.7.50","4.7.49","4.7.48","4.7.47","4.7.46","4.7.45","4.7.44","4.7.43","4.7.42","4.7.41","4.7.40","4.7.39","4.7.38","4.7.37","4.7.36","4.7.35","4.7.34","4.7.33","4.7.32","4.7.31","4.7.30","4.7.29","4.7.28","4.7.27","4.7.26","4.7.25","4.7.24","4.7.23","4.7.22","4.7.21","4.7.20","4.7.19","4.7.18","4.7.17","4.7.16","4.7.15","4.7.14","4.7.13","4.7.12","4.7.11","4.7.10","4.7.9","4.7.8","4.7.7","4.7.6","4.7.5","4.7.4","4.7.3","4.7.2","4.7.1","4.7.0","hab-pkg-automate-workflow-nginx","4.6.0","4.5.197","4.5.196","4.5.195","4.5.194","4.5.193","4.5.192","4.5.191","4.5.190","4.5.189","4.5.188","4.5.187","4.5.178","4.5.186","4.5.185","4.5.184","4.5.183","4.5.182","4.5.181","4.5.180","4.5.179","4.5.177-released","4.5.177","4.5.176","4.5.175","4.5.174","4.5.173","4.5.172","4.5.171","4.5.170","4.5.169","4.5.168","4.5.167","4.5.166","4.5.165","4.5.164","4.5.163","4.5.162","4.5.161","4.5.160","4.5.159","4.5.158","4.5.157","4.5.156","4.5.155","4.5.154","4.5.153","4.5.152","4.5.151","4.5.150","4.5.149","4.5.148","4.5.147","4.5.146","4.5.145","4.5.144","4.5.143","4.5.142","4.5.141","4.5.140","4.5.139","4.5.138","4.5.137","4.5.136","4.5.135","4.5.134","4.5.133","4.5.132","4.5.131","4.5.130","4.5.129","4.5.128","4.5.127","4.5.126","4.5.125","4.5.124","4.5.123","4.5.122","4.5.121","4.5.120","4.5.119","4.5.118","4.5.117","4.5.116","4.5.115","4.5.114","4.5.113","4.5.112","4.5.111","4.5.110","4.5.109","4.5.108","4.5.107","4.5.106","4.5.105","4.5.104","4.5.103","4.5.102","4.5.101","4.5.100","4.5.99","4.5.98","4.5.97","4.5.96","4.5.95","4.5.94","4.5.93","4.5.92","4.5.91","4.5.90","4.5.89","4.5.88","4.5.87","4.5.86","4.5.85","4.5.84","4.5.83","4.5.82","4.5.81","4.5.79","4.5.78","4.5.77","4.5.76","4.5.75","4.5.74","4.5.73","4.5.72","4.5.71","4.5.70","4.5.69","4.5.68","4.5.67","4.5.66","4.5.65","4.5.64","4.5.63","4.5.62","4.5.61","4.5.60","4.5.59","4.5.58","4.5.57","4.5.56","4.5.55","4.5.54","4.5.53","4.5.52","4.5.51","4.5.50","4.5.49","4.5.48","4.5.47","4.5.46","4.5.45","4.5.44","4.5.43","4.5.42","4.5.41","4.5.40","4.5.39","4.5.38","4.5.37-released","4.5.37","4.5.36","4.5.35","4.5.34","4.5.33","4.5.32","4.5.31","4.5.30","4.5.29","4.5.28","4.5.27","4.5.26","4.5.25","4.5.24","4.5.23","4.5.22","4.5.21","4.5.20","4.5.19","4.5.18","4.5.17","4.5.16","4.5.15","4.5.14","4.5.13","4.5.12","4.5.11","4.5.10","4.5.9","4.5.8","4.5.7","4.5.6","4.5.5","4.5.4","4.5.3","4.4.13","4.5.2-released","4.5.2","4.5.1","4.5.0","4.4.17","4.4.16","4.4.15","4.4.14","4.4.12","4.4.11","4.4.10-released","4.4.10","4.4.9","4.4.8","4.4.7","4.4.6","4.4.5","4.4.4","4.4.3","4.4.2","4.4.1","4.4.0","4.3.82","4.3.81","4.3.80","4.3.79","4.3.78","4.3.77","4.3.76","4.3.43","4.3.75","4.3.74","4.3.73","4.3.70","4.3.72","4.3.71","4.3.69","4.3.68","4.3.67","4.3.66","4.3.65","4.3.64","4.3.63","4.3.62","4.3.60","4.3.61","4.3.57","4.3.59","4.3.58","4.3.56","4.3.55","4.3.54","4.3.53","4.3.52","4.3.51","4.3.50","4.3.49","4.3.48","4.3.47","4.3.46","4.3.45","4.3.44","4.3.42","4.3.41","4.3.40","4.3.39","4.3.38","4.3.37","4.3.36","4.3.35","4.3.34","4.3.21","4.3.33","4.3.32","4.3.26","4.3.31","4.3.30","4.3.29","4.3.28","4.3.27","4.3.25","4.3.24","4.3.23","4.3.22","4.3.20","4.3.19","4.3.18","4.3.17","4.3.16","4.3.14","4.3.13","4.3.12","4.3.0-released","4.3.0","4.3.11","4.3.6","4.3.10","4.3.9","4.3.8","4.3.7","4.3.5","4.3.4","4.3.3","4.3.2","4.3.1","4.2.109","4.2.108","4.2.107","4.2.106","4.2.105","4.2.104","4.2.103","4.2.102","4.2.101","4.2.100","4.2.99","4.2.98","4.2.97","4.2.96","4.2.95","4.2.94","4.2.93","4.2.92","4.2.91","4.2.90","4.2.89","4.2.83","4.2.88","4.2.87","4.2.86","4.2.85","4.2.84","4.2.82","4.2.81","4.2.80","4.2.79","4.2.78","4.2.77","4.2.76","4.2.75","4.2.74","4.2.73","4.2.72","4.2.68","4.2.71","4.2.70","4.2.69","4.2.67","4.2.66","4.2.65","4.2.64","4.2.51","4.2.63","4.2.62","4.2.61","4.2.60","4.2.59-released","4.2.59","4.2.58","4.2.57","4.2.56","4.2.55","4.2.54","4.2.52","4.2.53","4.2.16","4.2.50","4.2.49","4.2.48","4.2.47-released","4.2.47","4.2.46","4.2.45","4.2.44","4.2.43","4.2.42","4.2.41","4.2.40","4.2.39","4.2.38","4.2.37","4.2.25","4.2.36","4.2.35","4.2.34","4.2.33","4.2.32","4.2.31","4.2.30","4.2.29","4.2.28","4.2.27","4.2.24","4.2.23","4.2.22-released","4.2.22","4.2.21","4.2.20","4.2.19","4.2.18","4.2.17","4.2.15","4.2.14","4.2.13","4.2.12","4.2.11","4.2.10-released","4.2.10","4.2.9","4.2.8","4.2.7","4.2.6","4.2.5","4.2.4","4.2.3","4.2.2","4.2.1","4.2.0","4.1.5","4.1.4","4.1.3-released","4.1.3","4.1.2","4.1.1-released","4.1.1","4.1.0","4.0.109","4.0.108","4.0.107","4.0.106","4.0.105","4.0.104","4.0.103","4.0.102","4.0.101","4.0.100","4.0.99","4.0.98","4.0.97","4.0.96","4.0.95","4.0.94","4.0.93","4.0.92","4.0.91-released","4.0.91","4.0.90","4.0.89","4.0.88","4.0.87","4.0.86","4.0.85","4.0.84","4.0.83","4.0.82","4.0.81","4.0.80","4.0.79","4.0.78","4.0.77","4.0.74","4.0.76","4.0.75","4.0.72","4.0.73","4.0.71","4.0.70","4.0.69","4.0.68","4.0.67","4.0.66","4.0.65","4.0.64","4.0.63","4.0.62","4.0.61","4.0.60","4.0.59","4.0.58","4.0.57","4.0.56","4.0.55","4.0.54-released","4.0.54","4.0.53","4.0.52","4.0.51","4.0.50","4.0.49","4.0.48","4.0.47","4.0.46","4.0.45","4.0.44","4.0.43","4.0.42","4.0.41","4.0.40","4.0.39","4.0.38","4.0.37","4.0.36","4.0.35","4.0.34","4.0.33","4.0.32","4.0.31","4.0.30","4.0.29","4.0.28","4.0.12","4.0.27-released","4.0.27","4.0.26","4.0.25","4.0.24","4.0.23","4.0.22","4.0.20","4.0.21","4.0.19","4.0.18","4.0.17","4.0.16","4.0.15","4.0.14","4.0.13","4.0.11","4.0.10","4.0.9","4.0.8","4.0.7","4.0.6","4.0.5","4.0.4","4.0.3","4.0.2","4.0.1","4.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40050.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}]}