CVE-2024-24785 — Errors returned from JSON marshaling may break template escaping in html/template
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing …
Published: 2024-03-05 · CVSS: 5.4 · CVSS 3.1
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected content into templates.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7