CVE-2020-24553

Related Files

Ubuntu Security Notice USN-4758-1

Posted Mar 9, 2021

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4758-1 - It was discovered that Go applications incorrectly handled uploaded content. If a user were tricked into visiting a malicious page, a remote attacker could exploit this with a crafted file to conduct cross-site scripting attacks.

tags | advisory, remote, xss

systems | linux, ubuntu

advisories | CVE-2020-24553

SHA-256 | ec7a75c3d729b70e4e9577e5c347086d722b514785b95d015dc4aca2124b4f2c

Download | Favorite | View

Red Hat Security Advisory 2021-0146-01

Posted Jan 15, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-0146-01 - Red Hat OpenShift Serverless 1.12.0 is a generally available release of the OpenShift Serverless Operator. This version of the OpenShift Serverless Operator is supported on Red Hat OpenShift Container Platform version 4.6, and includes security and bug fixes and enhancements. For more information, see the documentation listed in the References section. Issues addressed include code execution and cross site scripting vulnerabilities.

tags | advisory, vulnerability, code execution, xss

systems | linux, redhat

advisories | CVE-2018-20843, CVE-2019-13050, CVE-2019-13627, CVE-2019-14889, CVE-2019-15903, CVE-2019-16168, CVE-2019-19221, CVE-2019-19906, CVE-2019-19956, CVE-2019-20218, CVE-2019-20387, CVE-2019-20388, CVE-2019-20454, CVE-2019-5018, CVE-2020-10029, CVE-2020-13630, CVE-2020-13631, CVE-2020-13632, CVE-2020-1730, CVE-2020-1751, CVE-2020-1752, CVE-2020-1971, CVE-2020-24553, CVE-2020-24659, CVE-2020-28362, CVE-2020-28366, CVE-2020-28367

SHA-256 | a86c00be6acf79cfc141fb047b2a8d856fd69b40c660eaa8ec6d9b8a5a91d313

Download | Favorite | View

Red Hat Security Advisory 2021-0145-01

Posted Jan 14, 2021

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2021-0145-01 - Red Hat OpenShift Serverless Client kn CLI is delivered as an RPM package for installation on RHEL platforms, and as binaries for non-Linux platforms. Red Hat OpenShift Serverless Client kn 1.12.0 provides a CLI to interact with Red Hat OpenShift Serverless 1.12.0, and includes security and bug fixes and enhancements. For more information, see the release notes listed in the References section. Issues addressed include code execution and cross site scripting vulnerabilities.

tags | advisory, vulnerability, code execution, xss

systems | linux, redhat

advisories | CVE-2020-24553, CVE-2020-28362, CVE-2020-28366, CVE-2020-28367

SHA-256 | bd106d84adec1cf85267c4b189795d02345599e4effd3223907818a64a88382b

Download | Favorite | View

Red Hat Security Advisory 2020-5493-01

Posted Dec 16, 2020

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2020-5493-01 - Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Issues addressed include code execution and cross site scripting vulnerabilities.

tags | advisory, vulnerability, code execution, xss

systems | linux, redhat

advisories | CVE-2020-24553, CVE-2020-28362, CVE-2020-28366, CVE-2020-28367

SHA-256 | 9db0445d192cd927f076b1b9f05e9b0a72c19cf68c3556fb47f8629d3f54f1b1

Download | Favorite | View

Go CGI / FastCGI Transport Cross Site Scripting

Posted Sep 2, 2020

Site redteam-pentesting.de

The CGI and FastCGI implementations in the Go standard library behave differently from the HTTP server implementation when serving content. In contrast to the documented behavior, they may return non-HTML data as HTML. This may lead to cross site scripting vulnerabilities even if uploaded data has been validated during upload. Versions 1.15 and 1.14.7 and below are affected.

tags | exploit, web, cgi, vulnerability, xss

advisories | CVE-2020-24553

SHA-256 | 3e08219d5677447756165c051aed3766da7e30f5b0c6159ccef3c81277c85c1f

Download | Favorite | View