Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2024-22199
Analyzed
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-11 Jan, 2024 | 18:15
Updated At-18 Jan, 2024 | 16:54

This package provides universal methods to use multiple template engines with the Fiber web framework using the Views interface. This vulnerability specifically impacts web applications that render user-supplied data through this template engine, potentially leading to the execution of malicious scripts in users' browsers when visiting affected web pages. The vulnerability has been addressed, the template engine now defaults to having autoescape set to `true`, effectively mitigating the risk of XSS attacks.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.16.1MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Secondary3.19.3CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
Type: Primary
Version: 3.1
Base score: 6.1
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Type: Secondary
Version: 3.1
Base score: 9.3
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
CPE Matches

gofiber
gofiber
>>django>>Versions before 3.1.9(exclusive)
cpe:2.3:a:gofiber:django:*:*:*:*:*:go:*:*
Weaknesses
CWE IDTypeSource
CWE-116Primarysecurity-advisories@github.com
CWE-20Primarysecurity-advisories@github.com
CWE-79Primarysecurity-advisories@github.com
CWE ID: CWE-116
Type: Primary
Source: security-advisories@github.com
CWE ID: CWE-20
Type: Primary
Source: security-advisories@github.com
CWE ID: CWE-79
Type: Primary
Source: security-advisories@github.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/gofiber/template/commit/28cff3ac4d4c117ab25b5396954676d624b6cb46security-advisories@github.com
Patch
https://github.com/gofiber/template/security/advisories/GHSA-4mq2-gc4j-cmw6security-advisories@github.com
Mitigation
Vendor Advisory
Hyperlink: https://github.com/gofiber/template/commit/28cff3ac4d4c117ab25b5396954676d624b6cb46
Source: security-advisories@github.com
Resource:
Patch
Hyperlink: https://github.com/gofiber/template/security/advisories/GHSA-4mq2-gc4j-cmw6
Source: security-advisories@github.com
Resource:
Mitigation
Vendor Advisory
Change History
0Changes found

Details not found