CVE-2024-3187

This issue tracks two CWE-416 Use After Free (UAF) and one CWE-415 Double Free vulnerabilities in Goahead versions <= 6.0.0. These are caused by JST values not being nulled when freed during parsing of JST templates. If the ME_GOAHEAD_JAVASCRIPT flag is enabled, a remote attacker with the privileges to modify JavaScript template (JST) files could exploit this by providing malicious templates. This may lead to memory corruption, potentially causing a Denial of Service (DoS) or, in rare cases, code execution, though the latter is highly context-dependent.

• CWE-415
• CWE-416

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-3187

Published

Oct 17, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-31864Improper Control of Generation of Code ('Code Injection') vu…9.8
• CVE-2024-31865Improper Input Validation vulnerability in Apache Zeppelin. …6.5
• CVE-2024-31866Improper Encoding or Escaping of Output vulnerability in Apa…9.8
• CVE-2024-31867Improper Input Validation vulnerability in Apache Zeppelin. …6.5
• CVE-2024-31868Improper Encoding or Escaping of Output vulnerability in Apa…6.1
• CVE-2024-31869Airflow versions 2.7.0 through 2.8.4 have a vulnerability th…4.3
• CVE-2024-31870IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined t…3.3
• CVE-2024-31871IBM Security Verify Access Appliance 10.0.0 through 10.0.7 c…8.1
• CVE-2024-31872IBM Security Verify Access Appliance 10.0.0 through 10.0.7 c…8.1
• CVE-2024-31873IBM Security Verify Access Appliance 10.0.0 through 10.0.7 c…7.5
• CVE-2024-31874IBM Security Verify Access Appliance 10.0.0 through 10.0.7 u…5.5
• CVE-2024-31878IBM i 7.2, 7.3, 7.4, and 7.5 Service Tools Server (SST) is v…5.3