{"id":"GHSA-xfjj-f699-rc79","summary":"tiagorlampert CHAOS vulnerable to arbitrary code execution","details":"An issue in tiagorlampert CHAOS before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows a remote attacker to execute arbitrary code via the unsafe concatenation of the `filename` argument into the `buildStr` string without any sanitization or filtering.","aliases":["CVE-2024-30850","CVE-2024-33434","GHSA-p3j6-f45h-hw5f","GO-2024-2822"],"modified":"2026-04-06T23:18:42.166521Z","published":"2024-05-07T15:30:37Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2024-05-07T16:53:55Z","nvd_published_at":"2024-05-07T14:15:10Z","cwe_ids":["CWE-78"],"severity":"CRITICAL"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-33434"},{"type":"WEB","url":"https://github.com/tiagorlampert/CHAOS/pull/95"},{"type":"WEB","url":"https://github.com/tiagorlampert/CHAOS/commit/1b451cf62582295b7225caf5a7b506f0bad56f6b"},{"type":"WEB","url":"https://github.com/tiagorlampert/CHAOS/commit/24c9e109b5be34df7b2bce8368eae669c481ed5e"},{"type":"WEB","url":"https://github.com/tiagorlampert/CHAOS/commit/b47438d36e3ad746de8c009e644f6e5396703f25"},{"type":"WEB","url":"https://gist.github.com/slimwang/d1ec6645ba9012a551ea436679244496"},{"type":"PACKAGE","url":"https://github.com/tiagorlampert/CHAOS"},{"type":"WEB","url":"https://web.archive.org/web/20240406061035/https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents"}],"affected":[{"package":{"name":"github.com/tiagorlampert/CHAOS","ecosystem":"Go","purl":"pkg:golang/github.com/tiagorlampert/CHAOS"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-20220716132853-b47438d36e3a"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-xfjj-f699-rc79/GHSA-xfjj-f699-rc79.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}