Lucene search

K
osvGoogleOSV:GHSA-C5RV-HJJC-JV7M
HistoryApr 12, 2024 - 3:37 p.m.

tiagorlampert CHAOS vulnerable to Cross Site Scripting

2024-04-1215:37:21
Google
osv.dev
2
cross site scripting
tiagorlampert chaos
remote attacker
privilege escalation
software

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.

CPENameOperatorVersion
github.com/tiagorlampert/chaosle5.0.1

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for OSV:GHSA-C5RV-HJJC-JV7M