Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-29509
HistoryDec 14, 2020 - 8:15 p.m.

Code injection

2020-12-1420:15:00
PRIOn knowledge base
www.prio-n.com
9

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CPENameOperatorVersion
golt1.17

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%