Lucene search
+L

1 matches found

OSV
OSV
added 2023/04/06 4:15 p.m.10 views

AZL-25993 CVE-2023-24538 affecting package msft-golang for versions less than 1.20.11-1

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.8CVSS6.8AI score0.02281EPSS
SaveExploits0References1
Rows per page
Query Builder