CVE-2025-46816
criticalPriorität · verfolgen · 10EPSS 0.007 · 54. PerzentilExploit · PoCEUUSEPSS · bewertet 2026-10-28
goshs is a SimpleHTTPServer written in Go. Starting in version 0.3.4 and prior to version 1.0.5, running goshs without arguments makes it possible for anyone to execute commands on the server. The function `dispatchReadPump` does not checks the option cli `-c`, thus allowing anyone to execute arbitrary command through the use of websockets. Version 1.0.5 fixes the issue.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (1)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- Guilhem7/CVE-2025-46816POC for exploit of goshsPoC · poc_in_github
betroffene Produkte (2)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- GHSA-rwj2-w85g-5cmmgoshs route not protected, allows command execution2025-05-06ghsa · osvUS
### Summary It seems that when running **goshs** without arguments it is possible for anyone to execute commands on the server. This was tested on version **1.0.4** of **goshs**. The command function was introduced in version **0.3.4**. ### Details It seems that the function ```dispatchReadPump``` does not checks the option cli ```-c```, thus allowing anyone to execute arbitrary command through the use of websockets. ### PoC Used **websocat** for the POC: ```bash echo -e '{"type": "command", "content": "id"}' |./websocat 'ws://192.168.1.11:8000/?ws' -t ``` ### Impact The vulnerability will only impacts goshs server on vulnerable versions.
- GO-2025-3672goshs route not protected, allows command execution in github.com/patrickhener/goshs2025-05-15vendor · osvUS
goshs route not protected, allows command execution in github.com/patrickhener/goshs
auch bekannt als (5)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2025-46816cnnvd
- https://github.com/patrickhener/goshs/commit/160220974576afe5111485b8d12fd36058984cfacnnvd
- https://github.com/patrickhener/goshs/releasesPatchcnnvd
- https://github.com/patrickhener/goshs/security/advisories/GHSA-rwj2-w85g-5cmmcnnvd
- https://github.com/patrickhener/goshs/commit/160220974576afe5111485b8d12fd36058984cfaenisa_euvd
- https://github.com/patrickhener/goshs/security/advisories/GHSA-rwj2-w85g-5cmmenisa_euvd
- https://github.com/patrickhener/goshs/commit/160220974576afe5111485b8d12fd36058984cfanvd
- https://github.com/patrickhener/goshs/security/advisories/GHSA-rwj2-w85g-5cmmnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan