html-template up to 1.21.7/1.22.0 on Go MarshalJSON neutralization

Summaryinfo

A vulnerability was found in html-template up to 1.21.7/1.22.0 on Go and classified as problematic. This affects the function MarshalJSON. The manipulation results in neutralization. This vulnerability is known as CVE-2024-24785. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in html-template up to 1.21.7/1.22.0 on Go. It has been classified as problematic. Affected is the function MarshalJSON. The manipulation with an unknown input leads to a neutralization vulnerability. CWE is classifying the issue as CWE-707. The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component. This is going to have an impact on integrity. CVE summarizes:

If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.

The weakness was published 03/06/2024. This vulnerability is traded as CVE-2024-24785 since 01/30/2024. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 208702 (Ubuntu 22.04 LTS : Go vulnerabilities (USN-7061-1)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.21.8 or 1.22.1 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (208702) and CERT Bund (WID-SEC-2024-0560). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Affected

• Amazon Linux 2
• Red Hat Enterprise Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• Gentoo Linux
• Xerox FreeFlow Print Server
• RESF Rocky Linux
• Golang Go
• IBM Spectrum Protect Plus

Productinfo

Name

• html-template

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.21.0
• 1.21.1
• 1.21.2
• 1.21.3
• 1.21.4
• 1.21.5
• 1.21.6
• 1.21.7
• 1.22.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion