← Back to CVE List

CVE-2020-24553

Published: 2020-09-02T17:15Z
Last Modified: 2024-11-21T05:14Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt