CVE-2024-24785

Source
https://cve.org/CVERecord?id=CVE-2024-24785
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24785.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-24785
Aliases
Downstream
ALPINE (1)
ALSA (4)
AZL (4)
BELL (1)
CGA (676)
CLEANSTART (2)
CLSA (1)
DEBIAN (1)
MINI (3)
OESA (8)
openSUSE (2)
RHSA (7)
RLSA (2)
SUSE (8)
UBUNTU (1)
Related
Published
2024-03-05T23:15:07Z
Modified
2026-04-10T05:09:53Z
Summary
[none]
Details

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.

References

Affected packages