CVE-2020-24553
1 advisory.
Go/stdlib CVE-2020-24553: unknown, EPSS 3.65%
Cross-site scripting in net/http/cgi and net/http/fcgi
Action: Upgrade stdlib to 1.14.8 or later.
Upgrade Go to 1.14.8.
Upgrade Go to 1.15.1.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.8 | - |
| 1.15.0-0 | 1.15.1 | - |
Fixed versions
| 1.14.8 | 1.15.1 |
Sources
- osv: GO-2021-0226
- https://go.dev/cl/252179
- https://go.googlesource.com/go/+/4f5cd0c0331943c7ec72df3b827d972584f77833
- https://groups.google.com/g/golang-announce/c/8wqlSbkLdPs
- https://go.dev/issue/40928
CVE-2020-24553 · published · modified · JSON