GO-2024-2534

See a problem?
Please try reporting it to the source first.
Source
https://pkg.go.dev/vuln/GO-2024-2534
Import Source
https://vuln.go.dev/ID/GO-2024-2534.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2024-2534
Aliases
Related
Published
2024-02-15T21:14:33Z
Modified
2026-02-04T03:12:35.446035Z
Summary
Unauthenticated cross-site scripting in github.com/rancher/apiserver
Details

Unauthenticated cross-site scripting in github.com/rancher/apiserver

Database specific 
{
    "url": "https://pkg.go.dev/vuln/GO-2024-2534",
    "review_status": "REVIEWED"
}
References
Credits
    • diego95root
    • kujalamathias

Affected packages

Go / github.com/rancher/apiserver

Package

Name
github.com/rancher/apiserver
View open source insights on deps.dev
Purl
pkg:golang/github.com/rancher/apiserver

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.0.0-20240207153957-4fd7d821d952

Ecosystem specific 

{
    "imports": [
        {
            "symbols": [
                "HTMLResponseWriter.Write",
                "HTMLResponseWriter.WriteList",
                "HTMLResponseWriter.write"
            ],
            "path": "github.com/rancher/apiserver/pkg/writer"
        },
        {
            "symbols": [
                "New",
                "NewPrefixed",
                "ParseRequestURL"
            ],
            "path": "github.com/rancher/apiserver/pkg/urlbuilder"
        }
    ]
}

Database specific

source 
"https://vuln.go.dev/ID/GO-2024-2534.json"