What is GHSA-c5rv-hjjc-jv7m?

GHSA-c5rv-hjjc-jv7m is a security advisory published by GitHub Security Advisories with Medium severity. tiagorlampert CHAOS vulnerable to Cross Site Scripting

Which CVE IDs does GHSA-c5rv-hjjc-jv7m cover?

GHSA-c5rv-hjjc-jv7m covers the following CVE IDs: CVE-2024-31839. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c5rv-hjjc-jv7m?

GHSA-c5rv-hjjc-jv7m has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

Which products are affected by GHSA-c5rv-hjjc-jv7m?

GHSA-c5rv-hjjc-jv7m affects 1 product, including: go/github.com/tiagorlampert/CHAOS:\u003c= 5.0.1.

GHSA-c5rv-hjjc-jv7mMediumCVSS 4.8

tiagorlampert CHAOS vulnerable to Cross Site Scripting

Vendor

GitHub Security Advisories

Published

April 12, 2024

Last Modified

May 10, 2024

🔗 CVE IDs covered (1)

CVE-2024-31839 →

📋 Description

Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.

🎯 Affected products1

go/github.com/tiagorlampert/CHAOS:<= 5.0.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-31839
https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents
https://github.com/tiagorlampert/CHAOS
https://github.com/advisories/GHSA-c5rv-hjjc-jv7m