Lucene search
Redhat.comRH:CVE-2024-24785HistoryMar 06, 2024 - 3:33 a.m.
CVE-2024-24785
2024-03-0603:33:41
redhat.com
access.redhat.com
31
cve-2024-24785
go language
html/template
auto-escaping
injection vulnerability
5.8 Medium
AI Score
Confidence
Low
A flaw was found in Go’s html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into templates.
Related
veracode
veracode
Sensitive Information Disclosure
2024-03-17 17:29:23
cgr
cgr
CVE-2024-24785 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2024-24785
2024-03-05 23:15:07
osv
osv
BIT-golang-2024-24785
2024-03-12 08:24:09
Errors returned from JSON marshaling may break template escaping in html/template
2024-03-05 22:15:40
Important: go-toolset:rhel8 security update
2024-05-22 00:00:00
nvd
nvd
CVE-2024-24785
2024-03-05 23:15:07
cve
cve
CVE-2024-24785
2024-03-05 23:15:07
debiancve
debiancve
CVE-2024-24785
2024-03-05 23:15:07
cvelist
cvelist
prion
prion
Design/Logic Flaw
2024-03-05 23:15:00
ubuntucve
ubuntucve
CVE-2024-24785
2024-03-05 00:00:00
wolfi
wolfi
CVE-2024-24785 vulnerabilities
2024-06-07 09:07:51
cbl_mariner
cbl_mariner
CVE-2024-24785 affecting package golang for versions less than 1.21.6-1
2024-06-07 09:07:58
nessus
nessus
Golang < 1.21.8, 1.22.x < 1.22.1 Multiple Vulnerabilities
2024-03-07 00:00:00
EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-1567)
2024-05-09 00:00:00
EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-1589)
2024-05-09 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1589)
2024-05-10 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1567)
2024-05-10 00:00:00
openSUSE: Security Advisory for go1.22 (SUSE-SU-2024:0812-1)
2024-03-25 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2024-03-05 00:00:00
redos
redos
ROS-20240422-05
2024-04-22 00:00:00
almalinux
almalinux
Important: go-toolset:rhel8 security update
2024-05-22 00:00:00
Important: golang security update
2024-04-30 00:00:00
oraclelinux
oraclelinux
go-toolset:ol8 security update
2024-05-29 00:00:00
golang security update
2024-05-07 00:00:00
redhat
redhat
(RHSA-2024:3259) Important: go-toolset:rhel8 security update
2024-05-22 10:41:22
(RHSA-2024:2562) Important: golang security update
2024-04-30 11:38:52
amazon
amazon
Medium: golang
2024-05-23 22:04:00
rocky
rocky
golang security update
2024-05-10 14:32:42
