CVE-2023-48023 Scanner
Targets the /log_proxy endpoint in Ray Dashboard; attacker can force server-side requests to internal resources.
Used 2.6k times · 5.9k assets checked · url
CVE
CVE-2023-48023
9.1
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment
Attack Vector
Network
Privileges Req.
None
User Interaction
None
Updated Sep 26, 2026View on NVD →
S4E scanner
Monitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →