id: GO-2024-3133
modules:
    - module: github.com/chaosblade-io/chaosblade
      versions:
        - introduced: 0.0.3
        - fixed: 1.7.4
      vulnerable_at: 1.7.3
summary: Chaosblade vulnerable to OS command execution in github.com/chaosblade-io/chaosblade
cves:
    - CVE-2023-47105
ghsas:
    - GHSA-723h-x37g-f8qm
references:
    - advisory: https://github.com/advisories/GHSA-723h-x37g-f8qm
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-47105
    - fix: https://github.com/chaosblade-io/chaosblade/commit/6bc73c31e14ea2b1bfc30f359e1fe952859d9adc
    - web: https://github.com/chaosblade-io/chaosblade/blob/0a07380c9899febb2b544132783b376b44226cca/exec/os/executor.go#L68
    - web: https://narrow-oatmeal-0c0.notion.site/ChaosBlade-Remote-Command-Execution-CVE-2023-47105-4f5459046488436caaec2bced6ff26d7
source:
    id: GHSA-723h-x37g-f8qm
    created: 2024-09-19T14:00:56.130757669Z
review_status: UNREVIEWED