Detections
Analytics
CVE-2023-24539
high
Description
Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
References
https://security.netapp.com/advisory/ntap-20241129-0005/
https://pkg.go.dev/vuln/GO-2023-1751