/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2023-24539

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-24539

Severity

7.3

High

CVSS V3

Description

Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.

References

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing