Lucene search

K
githubGitHub Advisory DatabaseGHSA-C5RV-HJJC-JV7M
HistoryApr 12, 2024 - 3:37 p.m.

tiagorlampert CHAOS vulnerable to Cross Site Scripting

2024-04-1215:37:21
CWE-79
GitHub Advisory Database
github.com
6
cross site scripting
vulnerability
remote attacker
privilege escalation
handler.go component
software

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.

Affected configurations

Vulners
Node
netflixchaos_monkeyRange5.0.1jenkins
CPENameOperatorVersion
github.com/tiagorlampert/chaosle5.0.1

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for GHSA-C5RV-HJJC-JV7M