CVE-2024-24785

MEDIUM5.4

Description

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Affected products

Go standard library / html/template0 – 1.21.8
Go standard library / html/template1.22.0-0 – 1.22.1

References

MISChttps://go.dev/issue/65697
MISChttps://go.dev/cl/564196
MISChttps://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
MISChttps://pkg.go.dev/vuln/GO-2024-2610
MISChttps://security.netapp.com/advisory/ntap-20240329-0008/
MAILING_LISThttp://www.openwall.com/lists/oss-security/2024/03/08/4

Updated 15m ago · 8 sources