Approved changes feed: RSS · Atom

cpe:2.3:a:tiagorlampert:chaos:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorTiagorlampert (85a66e7a-5603-52c9-8790-a391f8b914d4)
ProductChaos (1b5d4025-4806-5eb5-8991-8ea81b27807b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-33434 vulnerable 2026-06-08 06:37:31.139373 Details available
An issue in tiagorlampert CHAOS v5.0.1 before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows a remote attacker to execute arbitrary code via the unsafe concatenation of the `filename` argument into the `buildStr` string without any sanitization or filtering.
Published: 2024-05-07T00:00:00.000Z
Updated: 2026-04-03T16:58:56.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31839 vulnerable 2026-06-08 06:35:32.153364 Details available
Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remote attacker to escalate privileges via the sendCommandHandler function in the handler.go component.
Published: 2024-04-12T00:00:00.000Z
Updated: 2024-08-02T01:59:50.666Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.