Name: CVE-2020-24553: Improper Neutralization of Input During Web Page Generation
Published: 2020-09-02T00:00:00.000Z
Keywords: CVE, CVE-2020-24553, CWE-79, CVSS 6.1, EPSS 0.03646

Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.

CVSS Details

CVSS 3.1 Base Score: 6.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	View advisory ↗View advisory ↗	alma-upgrade-delvealma-upgrade-go-toolsetalma-upgrade-golangalma-upgrade-golang-binalma-upgrade-golang-docsalma-upgrade-golang-miscalma-upgrade-golang-racealma-upgrade-golang-srcalma-upgrade-golang-tests	May 4, 2022	Sep 2, 2020
Alpine Linux	View advisory ↗View advisory ↗	alpine-linux-upgrade-go	Aug 22, 2024	Sep 2, 2020
Amazon Linux Ami 2	View advisory ↗	amazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-raceamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-tests	Nov 12, 2020	Sep 2, 2020
Amazon_linux	—	amazon-linux-upgrade-golang	Nov 18, 2020	Aug 20, 2020
Arch Linux	View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗	arch-linux-upgrade-latest	Jul 11, 2025	Sep 2, 2020
Centos_linux	—	centos-upgrade-delvecentos-upgrade-delve-debuginfocentos-upgrade-delve-debugsourcecentos-upgrade-go-toolsetcentos-upgrade-golangcentos-upgrade-golang-bincentos-upgrade-golang-docscentos-upgrade-golang-misccentos-upgrade-golang-racecentos-upgrade-golang-srccentos-upgrade-golang-tests	Dec 21, 2020	Sep 2, 2020
Debian	View advisory ↗	debian-upgrade-golang-1-15	Jul 30, 2024	Sep 2, 2020
Freebsd	View advisory ↗	freebsd-upgrade-package-go	Sep 2, 2020	Sep 1, 2020
Huawei Euleros 2_0_sp3	View advisory ↗	huawei-euleros-2_0_sp3-upgrade-golanghuawei-euleros-2_0_sp3-upgrade-golang-binhuawei-euleros-2_0_sp3-upgrade-golang-src	Jan 20, 2021	Sep 2, 2020
Huawei Euleros 2_0_sp5	View advisory ↗	huawei-euleros-2_0_sp5-upgrade-golanghuawei-euleros-2_0_sp5-upgrade-golang-binhuawei-euleros-2_0_sp5-upgrade-golang-src	Dec 16, 2020	Sep 2, 2020
Huawei Euleros 2_0_sp8	View advisory ↗	huawei-euleros-2_0_sp8-upgrade-golanghuawei-euleros-2_0_sp8-upgrade-golang-binhuawei-euleros-2_0_sp8-upgrade-golang-src	Dec 15, 2020	Sep 2, 2020
Oracle_linux	—	oracle-linux-upgrade-delveoracle-linux-upgrade-golangoracle-linux-upgrade-golang-binoracle-linux-upgrade-golang-docsoracle-linux-upgrade-golang-miscoracle-linux-upgrade-golang-raceoracle-linux-upgrade-golang-srcoracle-linux-upgrade-golang-testsoracle-linux-upgrade-go-toolset	Dec 23, 2020	Aug 1, 2020
Redhat_linux	View advisory ↗	no-fix-redhat-rpm-packageredhat-upgrade-delveredhat-upgrade-delve-debuginforedhat-upgrade-delve-debugsourceredhat-upgrade-go-toolsetredhat-upgrade-golangredhat-upgrade-golang-binredhat-upgrade-golang-docsredhat-upgrade-golang-miscredhat-upgrade-golang-raceredhat-upgrade-golang-srcredhat-upgrade-golang-tests	Dec 21, 2020	Sep 2, 2020
Suse	—	suse-upgrade-go1-14suse-upgrade-go1-14-docsuse-upgrade-go1-14-racesuse-upgrade-go1-15suse-upgrade-go1-15-doc	Oct 2, 2020	Aug 20, 2020
Ubuntu	View advisory ↗	ubuntu-upgrade-golang-1-10ubuntu-upgrade-golang-1-10-goubuntu-upgrade-golang-1-14ubuntu-upgrade-golang-1-14-go	Mar 9, 2021	Aug 20, 2020
Vmware Photon_os	View advisory ↗	vmware-photon_os_update_tdnf	Jan 20, 2025	Sep 2, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub