Oracle Fixes Critical Bug in Cloud Code Editor

Tenable researchers found a critical remote-code-execution vulnerability in Oracle Cloud Infrastructure's Code Editor stemming from a missing CSRF check on a file upload router; because Code Editor and Cloud Shell share the same filesystem and session data, an attacker visiting a malicious webpage could upload a malicious file into a victim's Cloud Shell and leverage the victim's OCI permissions to access data or move laterally to Resource Manager, Functions, and Data Science. Oracle patched the issue by requiring a custom CSRF token header, closing the attack vector.