CVE-2020-24553

SOURCE - nist

Summary

Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.

EPSS Score⁠: 0.00417 (0.740)

Common Weakness Enumeration (CWE)

SOURCE - nist

CWE-79⁠

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

SOURCE - redhat

CWE-79⁠

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sources (14)

Impacted images

nist

CREATED

4 years ago

UPDATED

3 years ago

SOURCE IDCVE-2020-24553⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-79⁠

CVSS SCORE

6.1medium

alpine

CREATED

4 years ago

UPDATED

1 month ago

SOURCE IDCVE-2020-24553⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

debian

CREATED

4 years ago

UPDATED

8 months ago

SOURCE IDCVE-2020-24553⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

ubuntu

CREATED

4 years ago

UPDATED

27 days ago

SOURCE IDCVE-2020-24553⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.1low

golang

CREATED

2 years ago

UPDATED

11 months ago

SOURCE IDGO-2021-0226⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

golang

CREATED

2 years ago

UPDATED

2 years ago

SOURCE IDGO-2021-0143⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE

amazon

CREATED

3 years ago

UPDATED

3 years ago

SOURCE IDALAS-2020-1554⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

amazon

CREATED

3 years ago

UPDATED

3 years ago

SOURCE IDALAS-2020-1445⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

bitnami

CREATED

8 months ago

UPDATED

8 months ago

SOURCE ID

BIT-2020-24553

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

bitnami

CREATED

2 months ago

UPDATED

2 months ago

SOURCE ID

BIT-golang-2020-24553

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

redhat

CREATED

4 years ago

UPDATED

10 months ago

SOURCE IDCVE-2020-24553⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-79⁠

CVSS SCORE

6.1medium

suse

CREATED

4 years ago

UPDATED

8 months ago

SOURCE IDCVE-2020-24553⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.1medium

oracle

CREATED

3 years ago

UPDATED

3 years ago

SOURCE IDELSA-2020-5493⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

inthewild

CREATED

10 months ago

UPDATED

10 months ago

SOURCE IDCVE-2020-24553⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM SOURCE