CyberRota Analysis
AI-GeneratedA code injection vulnerability exists in the Authenticate function of the core/webhook.go file in chenhg5 cc-connect versions up to 1.4.1, allowing remote attackers to manipulate the exec argument. This could lead to unauthorized code execution, posing a significant risk to systems utilizing this software. Organizations using affected versions should prioritize immediate patching or mitigation to protect against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of the argument exec results in code injection. The attack may be performed from remote. The exploit has been made public and could be used. The reported GitHub issue was closed automatically due to inactivity.