CVE-2024-22199

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Jan 11, 2024
Updated: Jan 18, 2024
CWE ID 116
CWE ID 20
CWE ID 79

Summary

CVE-2024-22199 is a vulnerability that affects the Fiber web framework's package, which provides universal methods to use multiple template engines. This vulnerability specifically impacts web applications that render user-supplied data through this template engine, potentially leading to the execution of malicious scripts in users' browsers when visiting affected web pages. The vulnerability has been addressed by setting the template engine's autoescape to true, effectively mitigating the risk of XSS attacks. The vulnerability has a base severity rating of MEDIUM and a base score of 6.1 according to NVD, with low integrity and confidentiality impacts. The exploitability score is 2.8 out of 10, and user interaction is required for exploitation. The affected products include various versions of uMSVL, with a total of 115 hits related to this vulnerability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-22199 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options