admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-24785.md
0xMarcio bc4580b779 Update CVE sources 2024-06-07 04:52
2024-06-07 04:52:01 +00:00

873 B
Raw Blame History

CVE-2024-24785

Description

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.

POC

Reference

No PoCs from references.

Github