Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade crunUpgrade podman-testsUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade critUpgrade skopeoUpgrade conmonUpgrade toolboxUpgrade criu-develUpgrade podmanUpgrade container-selinuxUpgrade udicaUpgrade containers-commonUpgrade libslirpUpgrade skopeo-testsUpgrade python3-criuUpgrade runcUpgrade libslirp-develUpgrade netavarkUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade python3-podmanUpgrade toolbox-testsUpgrade buildahUpgrade buildah-testsUpgrade criuUpgrade podman-dockerUpgrade aardvark-dnsUpgrade slirp4netns | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade containerd-debuginfoUpgrade golang-srcUpgrade golang-testsUpgrade golang-sharedUpgrade golangUpgrade golang-docsUpgrade containerd-stressUpgrade golang-binUpgrade golang-miscUpgrade containerd | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade golang-sharedUpgrade golang-binUpgrade golang-race | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade podman-catatonitUpgrade podman-gvproxy-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade critUpgrade toolboxUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade containers-commonUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade golang-testsUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade podmanUpgrade buildah-debugsourceUpgrade golang-binUpgrade criu-debugsourceUpgrade golang-docsUpgrade podman-remote-debuginfoUpgrade udicaUpgrade criu-libsUpgrade criuUpgrade golang-miscUpgrade golang-srcUpgrade netavarkUpgrade skopeo-testsUpgrade criu-develUpgrade delveUpgrade runc-debuginfoUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade conmonUpgrade go-toolsetUpgrade slirp4netnsUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-testsUpgrade runc-debugsourceUpgrade podman-dockerUpgrade buildahUpgrade golang-raceUpgrade crun-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade buildah-debuginfoUpgrade podman-gvproxyUpgrade python3-criuUpgrade crunUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade container-selinux | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade python3-criuUpgrade criu-develUpgrade container-selinuxUpgrade crunUpgrade skopeo-testsUpgrade podmanUpgrade criuUpgrade podman-pluginsUpgrade udicaUpgrade runcUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade critUpgrade podman-remoteUpgrade slirp4netnsUpgrade podman-dockerUpgrade cockpit-podmanUpgrade podman-testsUpgrade conmonUpgrade criu-libsUpgrade libslirp-develUpgrade python3-podmanUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade containers-commonUpgrade buildahUpgrade aardvark-dnsUpgrade skopeoUpgrade fuse-overlayfsUpgrade netavark | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade skopeoUpgrade openshift-clientsUpgrade microshiftUpgrade podman | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade runcUpgrade containernetworking-pluginsUpgrade netavarkUpgrade delve-debugsourceUpgrade golang-docsUpgrade python3-criuUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade toolbox-debuginfoUpgrade criu-debugsourceUpgrade criuUpgrade criu-libs-debuginfoUpgrade podman-debuginfoUpgrade critUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade crunUpgrade buildahUpgrade toolbox-testsNo solution existsUpgrade golang-testsUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade golang-binUpgrade podman-dockerUpgrade conmon-debugsourceUpgrade skopeoUpgrade buildah-debugsourceUpgrade libslirp-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-debugsourceUpgrade udicaUpgrade podman-remoteUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade podman-testsUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade libslirp-develUpgrade cockpit-podmanUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade python3-podmanUpgrade podman-gvproxyUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade conmonUpgrade golangUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade golang-raceUpgrade container-selinuxUpgrade slirp4netnsUpgrade containers-commonUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade aardvark-dnsUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade criu-develUpgrade golang-miscUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade delve | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade conmonUpgrade critUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade crunUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade criu-develUpgrade podman-debugsourceUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade slirp4netnsUpgrade podman-testsUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade libslirpUpgrade netavarkUpgrade runcUpgrade criuUpgrade buildahUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade criu-debugsourceUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade conmon-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.20-raceUpgrade go1.19-raceUpgrade go1.20Upgrade go1.19-docUpgrade go1.19Upgrade go1.20-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20-srcUpgrade golang-1.20Upgrade golang-1.19Upgrade golang-1.19-goUpgrade golang-1.20-goUpgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub