Lucene search

K
redosRedosROS-20241001-02
HistoryOct 01, 2024 - 12:00 a.m.

ROS-20241001-02

2024-10-0100:00:00
redos.red-soft.ru

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High

Vulnerability of html/template package of Golang programming language is related to incorrect handling of &ltscript&gt
occurrences of &ltscript&gt, &lt!–&gt and &lt/script&gt in JS literals in &ltscript&gt contexts. Exploitation
vulnerability
could allow an attacker acting remotely to perform an XSS attack

Vulnerability in html/template package of Golang programming language is related to improper handling of tokens
“” HTML comment markers, as well as hashbang “#!” comment markers in the contexts of
&ltscript&gt. Exploitation of the vulnerability could allow an attacker acting remotely to execute a
XSS

A vulnerability in the Golang programming language is related to the processing of an incomplete message after establishing a
communication for a QUIC connection. Exploitation of the vulnerability could allow an attacker to cause a denial of
service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64golang< 1.21.6-1UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

High