En resumen
- CVE-2024-45338 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a golang.org/x/net, golang.org/x/net/html.
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 64.9% de las vulnerabilidades.
- Solución: actualizar a 0.33.0 o posterior.
Description
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
NVD description
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
Más vulnerabilidades de golang.org/x/net
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free