Lucene search
+L

3 matches found

RedHat Linux
RedHat Linux
added 2024/06/27 1:06 p.m.9 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS7.2AI score0.00795EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2024/05/22 11:47 a.m.8 views

golang: html/template: errors returned from MarshalJSON methods may break template escaping

A flaw was found in Go's html/template standard library package. If errors returned from MarshalJSON methods contain user-controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing subsequent actions to inject unexpected content into...

5.4CVSS7.2AI score0.00795EPSS
SaveExploits0References8
OSV
OSV
added 2024/03/05 11:15 p.m.3 views

DEBIAN-CVE-2024-24785

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates...

5.4CVSS6.5AI score0.00795EPSS
SaveExploits0References1
Rows per page
Query Builder