Lucene search

K
osvGoogleOSV:CVE-2020-28366
HistoryNov 18, 2020 - 5:15 p.m.

CVE-2020-28366

2020-11-1817:15:11
Google
osv.dev
12
code injection
go command
arbitrary code execution
build time
malicious symbol name
linked object file

AI Score

7.8

Confidence

Low

EPSS

0.01

Percentile

84.1%

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.