CVE-2023-40050

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94 CWE-434

Affected software

Vendor	Product	Versions
Progress Software Corporation	Chef Automate	>= 4.0.0, <= 4.10.29
chef	automate	<= 4.10.29

References

https://community.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Automate-CVE-2023-40050Vendor Advisory
https://docs.chef.io/automate/profiles/Product
https://docs.chef.io/release_notes_automate/Release Notes
https://community.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Automate-CVE-2023-40050Vendor Advisory
https://docs.chef.io/automate/profiles/Product
https://docs.chef.io/release_notes_automate/Release Notes

Timeline

Published: Oct 31, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-400519.9This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation r CVE-2023-400527.5This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation r CVE-2023-400535.0A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function featu CVE-2023-400548.8The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a CVE-2023-400558.8The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a CVE-2023-400568.8SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged acco CVE-2023-400579.0The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability CVE-2023-400586.5Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager CVE-2023-40069.8Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.CVE-2023-400607.2A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-fact CVE-2023-400618.8Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result.CVE-2023-400628.8SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a