Approved changes feed: RSS · Atom

cpe:2.3:a:chaos-mesh:chaos_mesh:2.6.3:*:*:*:*:*:*:*

part: a version: 2.6.3 update: *

VendorChaos Mesh (55c79863-9962-514d-9124-144c6897f0b8)
ProductChaos Mesh (072f7a85-f472-587c-9677-7acce9545061)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/chaos-mesh/chaos-mesh purl2cpe 2026-06-01 10:11:23.166791
pkg:golang/github.com/chaos-mesh/chaos-mesh purl2cpe 2026-06-01 10:11:23.166792

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36538 vulnerable 2026-06-08 06:39:45.477547 Details available
Insecure permissions in chaos-mesh v2.6.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Published: 2024-07-24T00:00:00.000Z
Updated: 2024-08-02T03:37:05.270Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.