Go/github.com/tiagorlampert/CHAOS CVE-2024-31839: medium 4.8, EPSS 8.10%
tiagorlampert CHAOS vulnerable to Cross Site Scripting
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-c5rv-hjjc-jv7m
- https://nvd.nist.gov/vuln/detail/CVE-2024-31839
- https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents
- https://github.com/tiagorlampert/CHAOS
CVE-2024-31839 · published · modified · JSON