Описание
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.
EPSS
Процентиль: 7%
0.00029
Низкий
5.3 Medium
CVSS3
Дефекты
Связанные уязвимости
CVSS3: 5.3
ubuntu
27 дней назад
[crypto/tls: ALPN negotiation errors can contain arbitrary text]
CVSS3: 5.3
debian
7 дней назад
When Conn.Handshake fails during ALPN negotiation the error contains a ...
CVSS3: 5.3
github
7 дней назад
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.
EPSS
Процентиль: 7%
0.00029
Низкий
5.3 Medium
CVSS3