Vulnerability in Bishopfox Sliver
CVE-2024-41111
Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. Sliver version 1.6.0 (prerelease) is vulnerable to RCE on the teamserver by a low-pri…
EPSS: 0.002 (45.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Bishopfox Sliver — versions = 1.6.0-dev
Weakness classification (CWE)
References
- https://github.com/BishopFox/sliver/security/advisories/GHSA-hc5w-gxxr-w8x8 (x_refsource_CONFIRM)
- https://github.com/BishopFox/sliver/issues/65 (x_refsource_MISC)
- https://github.com/BishopFox/sliver/pull/1281 (x_refsource_MISC)
- https://github.com/BishopFox/sliver/commit/5016fb8d7cdff38c79e22e8293e58300f8d3bd57 (x_refsource_MISC)
- https://sliver.sh/docs?name=Multi-player+Mode (x_refsource_MISC)
Frequently asked questions
- What is CVE-2024-41111?
- CVE-2024-41111 is a high-severity vulnerability in Bishopfox Sliver, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.2/10. Published 2024-07-18.
- How severe is CVE-2024-41111?
- High severity. CVSS v3 base score is 7.2 out of 10.