A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control.
| Link | Tags |
|---|---|
| https://vuldb.com/?id.319321 | vdb entry technical description |
| https://vuldb.com/?ctiid.319321 | signature permissions required |
| https://vuldb.com/?submit.625956 | third party advisory |
| https://github.com/MaiqueSilva/VulnDB/blob/main/readme03.md | exploit |