auxiliary/gather/ray_lfi_cve_2023_6020

functional

Ray static arbitrary file read

view exploit source metasploittype auxiliarypublished 2023-11-15catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-6020US	high7.5OT high	14.7% (97th)	Exploit	2023-11-16
LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.