Lucene search
+L

49 matches found

OSV
OSV
added 2023/04/06 4:15 p.m.13 views

AZL-37296 CVE-2023-24538 affecting package golang for versions less than 1.21.6-1

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.8CVSS7.1AI score0.02281EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 4:15 p.m.16 views

AZL-34751 CVE-2023-24538 affecting package golang for versions less than 1.19.8-1

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.8CVSS6.8AI score0.02281EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 4:15 p.m.8 views

DEBIAN-CVE-2023-24538

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.8CVSS6.7AI score0.02281EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/06 4:15 p.m.14 views

AZL-25993 CVE-2023-24538 affecting package msft-golang for versions less than 1.20.11-1

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.8CVSS6.8AI score0.02281EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/06 4:15 p.m.41 views

Design/Logic Flaw

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

7.5CVSS9.4AI score0.02281EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/04/06 4:15 p.m.11 views

UBUNTU-CVE-2023-24538

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.8CVSS6.9AI score0.02281EPSS
SaveExploits0References10
OSV
OSV
added 2023/04/06 3:50 p.m.38 views

CVE-2023-24538 Backticks not treated as string delimiters in html/template

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.8CVSS6.9AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2023/04/06 3:50 p.m.15 views

CVE-2023-24538 Backticks not treated as string delimiters in html/template

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.5AI score0.02281EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/04/06 3:50 p.m.56 views

CVE-2023-24538

Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...

9.8CVSS6.8AI score0.02281EPSS
SaveExploits0
Rows per page
Query Builder