CVE-2024-31839 PoC — CHAOS 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31839.yaml

Associated Vulnerability

Title:CHAOS 安全漏洞 (CVE-2024-31839)
Description:github Chaos是一个应用软件。可视化之间的连接通过逻辑映射混沌理论和分形; CHAOS v5.0.1版本存在安全漏洞，该漏洞源于存在跨站脚本（XSS）漏洞。攻击者可利用该漏洞通过handler.go组件中的sendCommandHandler函数升级权限。

Description

Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.

File Snapshot


 id: CVE-2024-31839

info:
  name: CHAOS 5.0.1 'sendCommandHandler' - Cross-Site Scripting
  author: 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!