Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-29510
HistoryDec 14, 2020 - 8:15 p.m.

Code injection

2020-12-1420:15:00
PRIOn knowledge base
www.prio-n.com
3

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%

The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CPENameOperatorVersion
gole1.15

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%