CoreCVE
Back

HIGH

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable

Published Oct 4, 2023

Description

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-114

References (5)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Oct 4, 2023
Updated Sep 20, 2024
Reserved Aug 14, 2023
Link CVE-2023-40299

CISA Vulnrichment

Updated Sep 20, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-40299

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Oct 4, 2023
Updated Sep 20, 2024
Link EUVD-2023-44891

GitHub

No data