Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-39318
HistorySep 08, 2023 - 5:15 p.m.

Hardcoded credentials

2023-09-0817:15:00
PRIOn knowledge base
www.prio-n.com
12
html/template
improper handling
comment tokens
xss attack

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

The html/template package does not properly handle HTML-like โ€œโ€ comment tokens, nor hashbang โ€œ#!โ€ comment tokens, in <script> contexts. This may cause the template parser to improperly interpret the contents of <script> contexts, causing actions to be improperly escaped. This may be leveraged to perform an XSS attack.

CPENameOperatorVersion
goge1.21.0
golt1.21.1
golt1.20.8