Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-33434

May 7, 2024, 8:07 p.m.

Tags

cve@mitre.org
2024-05-07
CVE-2024-33434

Product(s) Impacted

CHAOS

  • before 1b451cf62582295b7225caf5a7b506f0bad56f6b
  • 24c9e109b5be34df7b2bce8368eae669c481ed5e

CHAOS

  • before 1b451cf62582295b7225caf5a7b506f0bad56f6b
  • before 24c9e109b5be34df7b2bce8368eae669c481ed5e

Description

An issue in tiagorlampert CHAOS before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows a remote attacker to execute arbitrary code via the unsafe concatenation of the `filename` argument into the `buildStr` string without any sanitization or filtering.

Weaknesses

Date

Published: May 7, 2024, 2:15 p.m.

Last Modified: May 7, 2024, 8:07 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://gist.github.com/ cve@mitre.org
https://github.com/ cve@mitre.org