Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xf7m-5vgf-jhv9

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

Go before 1.15.12 and 1.16.x before 1.16.5 allows injection.

Go before 1.15.12 and 1.16.x before 1.16.5 allows injection.

EPSS

Процентиль: 7%
0.00029
Низкий

7.3 High

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 7.3
ubuntu
почти 4 года назад

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

CVSS3: 7.5
redhat
около 4 лет назад

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

CVSS3: 7.3
nvd
почти 4 года назад

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

CVSS3: 7.3
msrc
9 месяцев назад

Описание отсутствует

CVSS3: 7.3
debian
почти 4 года назад

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS looku ...

EPSS

Процентиль: 7%
0.00029
Низкий

7.3 High

CVSS3

Дефекты

CWE-74