CVE-2023-4494: Easy Chat Server Project Easy Chat Server

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long username string to the register.ghp file asking for the name via a GET request resulting in arbitrary code execution on the remote machine.

Affected products

Published 2023-10-04. Last modified 2026-06-17.