Ray, Versions 2.6.3, 2.8.0
Target Program: Anyscale (Ray)
🎯 Vulnerability: Server-Side Request Forgery (SSRF)
💡 Defense Fix: Enforce URL whitelisting, block private IP ranges (10.0.0.0/8, 169.254.169.254), and mandate AWS IMDSv2 headers.
More Writeups Like This
pentester.land
by Pablo Artuso (@lmkalg), Yvan GenuerChained to hit: Discovering new vectors to gain remote and root access in SAP Enterprise Software
pentester.land
by Daniel KachakilVulnerabilities in Homepage Dashboard
pentester.land
by Ori Hollander, Shachar Menashe, Natan Nehorai, Uriya YavnieliFrom MLOps to MLOops: Exposing the Attack Surface of Machine Learning Platforms
pentester.land
by Orange Tsai (@orange_8361)