PT-2025-32467 · Unknown · Litmuschaos

Maique · Published 2025-08-10 · Updated 2025-08-10 · CVE-2025-8793

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: LitmusChaos Litmus versions up to 3.19.0

Description: A problematic issue exists in LitmusChaos Litmus due to improper control of resource identifiers resulting from the manipulation of the projectID argument. This issue can be exploited remotely. The exploit has been publicly disclosed. The vendor was informed of this disclosure but did not respond.

Recommendations: Versions prior to 3.19.0 should be used.

Exploit

Fix

Weakness Enumeration

CWE-99

Related Identifiers

CVE-2025-8793

Affected Products

Litmuschaos

References · 10

• 🔥 https://github.com/MaiqueSilva/VulnDB/blob/main/readme03.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8793 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8793 · Vendor Advisory
• https://t.me/CVEtracker/29609 · Telegram Post
• https://vuldb.com/?id.319321 · Note
• https://vuldb.com/?ctiid.319321 · Note
• https://t.me/cveNotify/131584 · Telegram Post
• https://twitter.com/f8sbrightermind/status/1954408431646818642 · Twitter Post
• https://vuldb.com/?submit.625956 · Note
• https://twitter.com/CVEnew/status/1954398916931174752 · Twitter Post