mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
90 lines
3.0 KiB
JSON
90 lines
3.0 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2023-24540",
|
|
"ASSIGNER": "security@golang.org",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set \"\\t\\n\\f\\r\\u0020\\u2028\\u2029\" in JavaScript contexts that also contain actions may not be properly sanitized during execution."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-74: Improper input validation"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "Go standard library",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "html/template",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "0",
|
|
"version_value": "1.19.9"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "1.20.0-0",
|
|
"version_value": "1.20.4"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://go.dev/issue/59721",
|
|
"refsource": "MISC",
|
|
"name": "https://go.dev/issue/59721"
|
|
},
|
|
{
|
|
"url": "https://go.dev/cl/491616",
|
|
"refsource": "MISC",
|
|
"name": "https://go.dev/cl/491616"
|
|
},
|
|
{
|
|
"url": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU",
|
|
"refsource": "MISC",
|
|
"name": "https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU"
|
|
},
|
|
{
|
|
"url": "https://pkg.go.dev/vuln/GO-2023-1752",
|
|
"refsource": "MISC",
|
|
"name": "https://pkg.go.dev/vuln/GO-2023-1752"
|
|
}
|
|
]
|
|
},
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Juho Nurminen of Mattermost"
|
|
}
|
|
]
|
|
} |