CVE-2020-24553

Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header

published September 2, 2020

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03646 · 89.5th percentile
Published
2020-09-02T16:25Z
EPSS history
Timeline
  • 02 SEP 16:25Z
    Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header
    cvelistv5