CVE-2023-48699

CVE-2023-48699 is a critical Remote Code Execution (RCE) vulnerability affecting the fastbots library, a tool for bot and scraper development using Selenium and the Page Object Model, specifically versions prior to 0.1.5. An attacker can exploit this by modifying the locators.ini file with malicious Python code, which is then executed without proper validation within the __locator__ function in page.py. This vulnerability carries a CVSS score of 9.8 (CRITICAL), indicating a severe risk with a network attack vector, low attack complexity, and high impacts on confidentiality, integrity, and availability. No user interaction is required for exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.