CVE-2023-2273 Rapid7 Insight Agent Directory Traversal
An attacker can write arbitrary files via unsanitized CLI input in Rapid7 Insight Agent, potentially leading to code execution or data modification.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-2273?
CVE-2023-2273 is a medium-severity path traversal vulnerability in Rapid7 Insight Agent, published on 26 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from a CLI argument flows into io.ioutil.WriteFile, where it is used as a path. This can result in a Path Traversal vulnerability and allow an attacker to write arbitrary files. This issue is remediated in version 3.3.0 via safe guards that reject inputs that attempt to do path traversal.
Weakness: CWE-22
Which versions are affected by CVE-2023-2273?
It affects 1 product.
Products include Rapid7 Insight Agent.
How do I fix CVE-2023-2273?
No fix has been published for CVE-2023-2273 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-2273 being exploited?
There is no known exploitation of CVE-2023-2273 in the wild and no public exploit code.
Other vulnerabilities in Rapid7 Insight Agent
- CVE-2026-6482 Local Privilege Escalation via OpenSSL configuration file in Insight Agent
- CVE-2021-4007 Rapid7 Insight Agent Privilege Escalation
- CVE-2019-5629 Privilege escalation in Insight Agent
- CVE-2026-4482 Insight Agent Private Key Information Disclosure via Inherited File Permissions
- CVE-2026-4837 Eval Injection in Rapid7 Insight Agent
Sources
Also known as GHSA-4pp4-6fgx-j56f.