CVE-2024-31839

2024-04-1200:00:00

mitre

github.com

cross site scripting

chaos v.5.0.1

remote attacker

escalate privileges

sendcommandhandler

handler.go

AI Score

6.7

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:tiagorlampert:chaos:-:*:*:*:*:*:*:*"
    ],
    "vendor": "tiagorlampert",
    "product": "chaos",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]