Logo
›
›vulnerability›CVE-2023-24540
Name
CVE-2023-24540
Source
NVD ( link)Debian ( link)
Description
Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CWEs
CWE-77
Published Date
Updated Date
Workaround
-
Advisories
https://go.dev/cl/491616Patch
https://go.dev/issue/59721Issue Tracking
https://groups.google.com/g/golang-announce/c/MEb0UyuSMsUMailing List
https://pkg.go.dev/vuln/GO-2023-1752Vendor Advisory
https://go.dev/cl/491616Patch
https://go.dev/issue/59721Issue Tracking
https://groups.google.com/g/golang-announce/c/MEb0UyuSMsUMailing List
https://pkg.go.dev/vuln/GO-2023-1752Vendor Advisory

Analysis#

Affected Component
Analysis
go
Exploitable
go-binary-native
Exploitable

Vulnerability Ratings#

9.8
CVSSv31
9.8
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
golang-bootstrap
openwrt
master
1.24.13-r1
Not Affected
golang1.26
openwrt
master
1.26.4-r1
Not Affected
golang-bootstrap
openwrt
openwrt-25.12
1.24.13-r1
Not Affected
golang1.26
openwrt
openwrt-25.12
1.26.4-r1
Not Affected
go
yocto
master
1.26.4
Not Affected
go-binary-native
yocto
master
1.26.4
Not Affected
go
yocto
scarthgap
1.22.12
Not Affected
go-binary-native
yocto
scarthgap
1.22.12
Not Affected