Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2020-24553
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.036
EPSS Ranking
88.1%
CVSS Severity
CVSS v3 Score
6.1
CVSS v2 Score
4.3
References
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00002.html
http://packetstormsecurity.com/files/159049/Go-CGI-FastCGI-Transport-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2020/Sep/5
http://seclists.org/fulldisclosure/2020/Sep/5
http://seclists.org/fulldisclosure/2020/Sep/5
http://seclists.org/fulldisclosure/2020/Sep/5
https://groups.google.com/forum/#%21topic/golang-announce/8wqlSbkLdPs
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZBO7Q73GGWBVYIKNH2HNN44Q5IQND5W/
https://security.netapp.com/advisory/ntap-20200924-0003/
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.redteam-pentesting.de/advisories/rt-sa-2020-004
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00002.html
http://packetstormsecurity.com/files/159049/Go-CGI-FastCGI-Transport-Cross-Site-Scripting.html
http://seclists.org/fulldisclosure/2020/Sep/5
http://seclists.org/fulldisclosure/2020/Sep/5
http://seclists.org/fulldisclosure/2020/Sep/5
http://seclists.org/fulldisclosure/2020/Sep/5
https://groups.google.com/forum/#%21topic/golang-announce/8wqlSbkLdPs
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZBO7Q73GGWBVYIKNH2HNN44Q5IQND5W/
https://security.netapp.com/advisory/ntap-20200924-0003/
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.redteam-pentesting.de/advisories/rt-sa-2020-004
Products affected by CVE-2020-24553
Golang
»
Go
»
Version:
Any
cpe:2.3:a:golang:go:*
Golang
»
Go
»
Version:
N/A
cpe:2.3:a:golang:go:-
Golang
»
Go
»
Version:
0.0.0-20201203163018-be400aefbc4c
cpe:2.3:a:golang:go:0.0.0-20201203163018-be400aefbc4c
Golang
»
Go
»
Version:
1.0
cpe:2.3:a:golang:go:1.0
Golang
»
Go
»
Version:
1.0.1
cpe:2.3:a:golang:go:1.0.1
Golang
»
Go
»
Version:
1.0.2
cpe:2.3:a:golang:go:1.0.2
Golang
»
Go
»
Version:
1.0.3
cpe:2.3:a:golang:go:1.0.3
Golang
»
Go
»
Version:
1.1
cpe:2.3:a:golang:go:1.1
Golang
»
Go
»
Version:
1.1.1
cpe:2.3:a:golang:go:1.1.1
Golang
»
Go
»
Version:
1.1.2
cpe:2.3:a:golang:go:1.1.2
Golang
»
Go
»
Version:
1.10
cpe:2.3:a:golang:go:1.10
Golang
»
Go
»
Version:
1.10.1
cpe:2.3:a:golang:go:1.10.1
Golang
»
Go
»
Version:
1.10.2
cpe:2.3:a:golang:go:1.10.2
Golang
»
Go
»
Version:
1.10.3
cpe:2.3:a:golang:go:1.10.3
Golang
»
Go
»
Version:
1.10.4
cpe:2.3:a:golang:go:1.10.4
Golang
»
Go
»
Version:
1.10.5
cpe:2.3:a:golang:go:1.10.5
Golang
»
Go
»
Version:
1.10.6
cpe:2.3:a:golang:go:1.10.6
Golang
»
Go
»
Version:
1.10.7
cpe:2.3:a:golang:go:1.10.7
Golang
»
Go
»
Version:
1.10.8
cpe:2.3:a:golang:go:1.10.8
Golang
»
Go
»
Version:
1.11.0
cpe:2.3:a:golang:go:1.11.0
Golang
»
Go
»
Version:
1.11.1
cpe:2.3:a:golang:go:1.11.1
Golang
»
Go
»
Version:
1.11.10
cpe:2.3:a:golang:go:1.11.10
Golang
»
Go
»
Version:
1.11.11
cpe:2.3:a:golang:go:1.11.11
Golang
»
Go
»
Version:
1.11.12
cpe:2.3:a:golang:go:1.11.12
Golang
»
Go
»
Version:
1.11.13
cpe:2.3:a:golang:go:1.11.13
Golang
»
Go
»
Version:
1.11.2
cpe:2.3:a:golang:go:1.11.2
Golang
»
Go
»
Version:
1.11.3
cpe:2.3:a:golang:go:1.11.3
Golang
»
Go
»
Version:
1.11.4
cpe:2.3:a:golang:go:1.11.4
Golang
»
Go
»
Version:
1.11.5
cpe:2.3:a:golang:go:1.11.5
Golang
»
Go
»
Version:
1.11.6
cpe:2.3:a:golang:go:1.11.6
Golang
»
Go
»
Version:
1.11.7
cpe:2.3:a:golang:go:1.11.7
Golang
»
Go
»
Version:
1.11.8
cpe:2.3:a:golang:go:1.11.8
Golang
»
Go
»
Version:
1.11.9
cpe:2.3:a:golang:go:1.11.9
Golang
»
Go
»
Version:
1.12
cpe:2.3:a:golang:go:1.12
Golang
»
Go
»
Version:
1.12.0
cpe:2.3:a:golang:go:1.12.0
Golang
»
Go
»
Version:
1.12.1
cpe:2.3:a:golang:go:1.12.1
Golang
»
Go
»
Version:
1.12.10
cpe:2.3:a:golang:go:1.12.10
Golang
»
Go
»
Version:
1.12.11
cpe:2.3:a:golang:go:1.12.11
Golang
»
Go
»
Version:
1.12.12
cpe:2.3:a:golang:go:1.12.12
Golang
»
Go
»
Version:
1.12.13
cpe:2.3:a:golang:go:1.12.13
Golang
»
Go
»
Version:
1.12.14
cpe:2.3:a:golang:go:1.12.14
Golang
»
Go
»
Version:
1.12.15
cpe:2.3:a:golang:go:1.12.15
Golang
»
Go
»
Version:
1.12.16
cpe:2.3:a:golang:go:1.12.16
Golang
»
Go
»
Version:
1.12.17
cpe:2.3:a:golang:go:1.12.17
Golang
»
Go
»
Version:
1.12.2
cpe:2.3:a:golang:go:1.12.2
Golang
»
Go
»
Version:
1.12.3
cpe:2.3:a:golang:go:1.12.3
Golang
»
Go
»
Version:
1.12.4
cpe:2.3:a:golang:go:1.12.4
Golang
»
Go
»
Version:
1.12.5
cpe:2.3:a:golang:go:1.12.5
Golang
»
Go
»
Version:
1.12.6
cpe:2.3:a:golang:go:1.12.6
Golang
»
Go
»
Version:
1.12.7
cpe:2.3:a:golang:go:1.12.7
Golang
»
Go
»
Version:
1.12.8
cpe:2.3:a:golang:go:1.12.8
Golang
»
Go
»
Version:
1.12.9
cpe:2.3:a:golang:go:1.12.9
Golang
»
Go
»
Version:
1.13
cpe:2.3:a:golang:go:1.13
Golang
»
Go
»
Version:
1.13.1
cpe:2.3:a:golang:go:1.13.1
Golang
»
Go
»
Version:
1.13.10
cpe:2.3:a:golang:go:1.13.10
Golang
»
Go
»
Version:
1.13.11
cpe:2.3:a:golang:go:1.13.11
Golang
»
Go
»
Version:
1.13.13
cpe:2.3:a:golang:go:1.13.13
Golang
»
Go
»
Version:
1.13.15
cpe:2.3:a:golang:go:1.13.15
Golang
»
Go
»
Version:
1.13.2
cpe:2.3:a:golang:go:1.13.2
Golang
»
Go
»
Version:
1.13.3
cpe:2.3:a:golang:go:1.13.3
Golang
»
Go
»
Version:
1.13.4
cpe:2.3:a:golang:go:1.13.4
Golang
»
Go
»
Version:
1.13.5
cpe:2.3:a:golang:go:1.13.5
Golang
»
Go
»
Version:
1.13.6
cpe:2.3:a:golang:go:1.13.6
Golang
»
Go
»
Version:
1.13.7
cpe:2.3:a:golang:go:1.13.7
Golang
»
Go
»
Version:
1.13.8
cpe:2.3:a:golang:go:1.13.8
Golang
»
Go
»
Version:
1.13.9
cpe:2.3:a:golang:go:1.13.9
Golang
»
Go
»
Version:
1.14
cpe:2.3:a:golang:go:1.14
Golang
»
Go
»
Version:
1.14.0
cpe:2.3:a:golang:go:1.14.0
Golang
»
Go
»
Version:
1.14.1
cpe:2.3:a:golang:go:1.14.1
Golang
»
Go
»
Version:
1.14.2
cpe:2.3:a:golang:go:1.14.2
Golang
»
Go
»
Version:
1.14.3
cpe:2.3:a:golang:go:1.14.3
Golang
»
Go
»
Version:
1.14.5
cpe:2.3:a:golang:go:1.14.5
Golang
»
Go
»
Version:
1.14.7
cpe:2.3:a:golang:go:1.14.7
Golang
»
Go
»
Version:
1.2
cpe:2.3:a:golang:go:1.2
Golang
»
Go
»
Version:
1.2.1
cpe:2.3:a:golang:go:1.2.1
Golang
»
Go
»
Version:
1.2.2
cpe:2.3:a:golang:go:1.2.2
Golang
»
Go
»
Version:
1.3
cpe:2.3:a:golang:go:1.3
Golang
»
Go
»
Version:
1.3.1
cpe:2.3:a:golang:go:1.3.1
Golang
»
Go
»
Version:
1.3.2
cpe:2.3:a:golang:go:1.3.2
Golang
»
Go
»
Version:
1.3.3
cpe:2.3:a:golang:go:1.3.3
Golang
»
Go
»
Version:
1.4
cpe:2.3:a:golang:go:1.4
Golang
»
Go
»
Version:
1.4.1
cpe:2.3:a:golang:go:1.4.1
Golang
»
Go
»
Version:
1.4.2
cpe:2.3:a:golang:go:1.4.2
Golang
»
Go
»
Version:
1.4.3
cpe:2.3:a:golang:go:1.4.3
Golang
»
Go
»
Version:
1.5
cpe:2.3:a:golang:go:1.5
Golang
»
Go
»
Version:
1.5.1
cpe:2.3:a:golang:go:1.5.1
Golang
»
Go
»
Version:
1.5.2
cpe:2.3:a:golang:go:1.5.2
Golang
»
Go
»
Version:
1.5.3
cpe:2.3:a:golang:go:1.5.3
Golang
»
Go
»
Version:
1.5.4
cpe:2.3:a:golang:go:1.5.4
Golang
»
Go
»
Version:
1.6
cpe:2.3:a:golang:go:1.6
Golang
»
Go
»
Version:
1.6.1
cpe:2.3:a:golang:go:1.6.1
Golang
»
Go
»
Version:
1.6.2
cpe:2.3:a:golang:go:1.6.2
Golang
»
Go
»
Version:
1.6.3
cpe:2.3:a:golang:go:1.6.3
Golang
»
Go
»
Version:
1.6.4
cpe:2.3:a:golang:go:1.6.4
Golang
»
Go
»
Version:
1.7
cpe:2.3:a:golang:go:1.7
Golang
»
Go
»
Version:
1.7.1
cpe:2.3:a:golang:go:1.7.1
Golang
»
Go
»
Version:
1.7.2
cpe:2.3:a:golang:go:1.7.2
Golang
»
Go
»
Version:
1.7.3
cpe:2.3:a:golang:go:1.7.3
Golang
»
Go
»
Version:
1.7.4
cpe:2.3:a:golang:go:1.7.4
Golang
»
Go
»
Version:
1.7.5
cpe:2.3:a:golang:go:1.7.5
Golang
»
Go
»
Version:
1.7.6
cpe:2.3:a:golang:go:1.7.6
Golang
»
Go
»
Version:
1.8
cpe:2.3:a:golang:go:1.8
Golang
»
Go
»
Version:
1.8.1
cpe:2.3:a:golang:go:1.8.1
Golang
»
Go
»
Version:
1.8.2
cpe:2.3:a:golang:go:1.8.2
Golang
»
Go
»
Version:
1.8.3
cpe:2.3:a:golang:go:1.8.3
Golang
»
Go
»
Version:
1.8.4
cpe:2.3:a:golang:go:1.8.4
Golang
»
Go
»
Version:
1.8.5
cpe:2.3:a:golang:go:1.8.5
Golang
»
Go
»
Version:
1.8.6
cpe:2.3:a:golang:go:1.8.6
Golang
»
Go
»
Version:
1.8.7
cpe:2.3:a:golang:go:1.8.7
Golang
»
Go
»
Version:
1.9
cpe:2.3:a:golang:go:1.9
Golang
»
Go
»
Version:
1.9.1
cpe:2.3:a:golang:go:1.9.1
Golang
»
Go
»
Version:
1.9.2
cpe:2.3:a:golang:go:1.9.2
Golang
»
Go
»
Version:
1.9.3
cpe:2.3:a:golang:go:1.9.3
Golang
»
Go
»
Version:
1.9.4
cpe:2.3:a:golang:go:1.9.4
Golang
»
Go
»
Version:
1.9.5
cpe:2.3:a:golang:go:1.9.5
Golang
»
Go
»
Version:
1.9.6
cpe:2.3:a:golang:go:1.9.6
Golang
»
Go
»
Version:
1.9.7
cpe:2.3:a:golang:go:1.9.7
Oracle
»
Communications Cloud Native Core Policy
»
Version:
1.5.0
cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.5.0
Fedoraproject
»
Fedora
»
Version:
33
cpe:2.3:o:fedoraproject:fedora:33
Opensuse
»
Leap
»
Version:
15.1
cpe:2.3:o:opensuse:leap:15.1
Opensuse
»
Leap
»
Version:
15.2
cpe:2.3:o:opensuse:leap:15.2
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved