CVE-2020-24553

Debian Bug report logs - #969661 golang-115: CVE-2020-24553 Package: src:golang-115; Maintainer for src:golang-115 is Go Compiler Team <team+go-compiler@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 6 Sep 2020 19:09:05 UTC Severity: important Tags: security, upstream Found ...

Synopsis Moderate: Red Hat OpenShift Serverless Client kn 1120 Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Serverless Client kn 1120Red Hat Product Security has rated this update as having a security impactof Moderate A Common Vulnerability Scoring System (CVSS) base score,which g ...

Synopsis Moderate: go-toolset:rhel8 security update Type/Severity Security Advisory: Moderate Topic An update for the go-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring ...

Synopsis Moderate: Release of OpenShift Serverless 1120 Type/Severity Security Advisory: Moderate Topic Release of OpenShift Serverless 1120Red Hat Product Security has rated this update as having a security impactof Moderate A Common Vulnerability Scoring System (CVSS) base score,which gives a detaile ...

Go before 1148 and 115x before 1151 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header (CVE-2020-24553) ...

Go before 1148 and 115x before 1151 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header (CVE-2020-24553) ...

In Go versions before 1151 and 1148 if the Content-Type header of a Handler was not explicitly set the net/http/cgi and net/http/fcgi packages would default to “text/html”, which could cause a Cross-Site Scripting vulnerability if an attacker can control any part of the contents of a response ...