CVE-2023-3978

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-3978
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3978.json
Aliases
Related
Withdrawn
2024-05-15T05:33:36.521175Z
Published
2023-08-02T20:15:12Z
Modified
2023-11-29T10:12:20.079289Z
Summary
[none]
Details

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

References

Affected packages

Git / github.com/golang/net

Affected ranges

Type
GIT
Repo
https://github.com/golang/net
Events
Introduced
0The exact introduced commit is unknown
Fixed

Affected versions

v0.*

v0.1.0
v0.10.0
v0.11.0
v0.12.0
v0.2.0
v0.3.0
v0.4.0
v0.5.0
v0.6.0
v0.7.0
v0.8.0
v0.9.0