UBUNTU-CVE-2024-24785
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
02 / AFFECTED SOFTWARE
Affected packages
1 explicit affected versions
2 explicit affected versions
10 explicit affected versions
8 explicit affected versions
2 explicit affected versions
5 explicit affected versions
10 explicit affected versions
9 explicit affected versions
2 explicit affected versions
2 explicit affected versions
4 explicit affected versions
7 explicit affected versions
2 explicit affected versions
4 explicit affected versions
1 explicit affected versions
4 explicit affected versions
2 explicit affected versions
2 explicit affected versions
3 explicit affected versions
4 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
05 / REFERENCES
Further evidence
- https://github.com/golang/go/commit/056b0edcb8c152152021eebf4cf42adbfbe77992
- https://github.com/golang/go/commit/3643147a29352ca2894fd5d0d2069bc4b4335a7e
- https://github.com/golang/go/issues/65697
- https://go.dev/cl/564196
- https://go.dev/issue/65697
- https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg
- https://pkg.go.dev/vuln/GO-2024-2610
- https://ubuntu.com/security/CVE-2024-24785
- https://ubuntu.com/security/notices/USN-6886-1
- https://ubuntu.com/security/notices/USN-7061-1
- https://ubuntu.com/security/notices/USN-7109-1
- https://www.cve.org/CVERecord?id=CVE-2024-24785