CVE-2023-6020

CVE-2023-6020 is a Local File Inclusion (LFI) vulnerability in the Ray framework's /static/ directory, allowing unauthenticated attackers to read arbitrary files on the server. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low complexity, potentially leading to significant information disclosure. The high EPSS score and FAUCET Risk Score of 99/100 indicate a high likelihood of exploitation. Active exploitation has been reported in the wild, with exploit modules available in Metasploit and Nuclei, and significant community discussion and media coverage highlighting its impact.