CVE-2023-24540criticalCWE-77

CVE-2023-24540: critical vulnerability in Go standard library html/template

Improper handling of JavaScript whitespace in html/template

Published · Updated

Follow this CVE+ Monitor html/template+ Monitor go

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.6%
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Go standard library · html/template
Related CVEs — Go standard library html/template

In the same product, most dangerous first.

CVE-2023-24538CRITICALBackticks not treated as string delimiters in html/templateEPSS 2.3%CVE-2023-24539HIGHImproper sanitization of CSS values in html/templateEPSS 1.0%CVE-2023-29400HIGHImproper handling of empty HTML attributes in html/templateEPSS 1.0%CVE-2023-39318—Improper handling of HTML-like comments in script contexts in html/templateEPSS 0.9%CVE-2023-39319—Improper handling of special tags within script contexts in html/templateEPSS 0.9%CVE-2024-24785MEDIUMErrors returned from JSON marshaling may break template escaping in html/templateEPSS 0.8%