Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade podman-dockerUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade netavarkUpgrade buildahUpgrade podman-catatonitUpgrade slirp4netnsUpgrade buildah-testsUpgrade criuUpgrade python3-podmanUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade skopeo-testsUpgrade podman-pluginsUpgrade libslirpUpgrade podmanUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade skopeoUpgrade libslirp-develUpgrade podman-testsUpgrade toolboxUpgrade critUpgrade containers-commonUpgrade conmonUpgrade criu-develUpgrade runcUpgrade criu-libs | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-miscUpgrade containerd-stressUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-sharedUpgrade containerdUpgrade golang-docsUpgrade containerd-debuginfoUpgrade golang-src | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golang-raceUpgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golang | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade golang-srcUpgrade golang-docsUpgrade golang-miscUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade skopeo-testsUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade delve-debuginfoUpgrade libslirp-debugsourceUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade containers-commonUpgrade runcUpgrade delveUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade fuse-overlayfsUpgrade golang-testsUpgrade podman-catatonitUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade critUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolboxUpgrade delve-debugsourceUpgrade podman-remoteUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade golangUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade golang-binUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade udicaUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade container-selinuxUpgrade crun-debuginfoUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade golang-raceUpgrade slirp4netnsUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade libslirpUpgrade conmonUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade crunUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade python3-podmanUpgrade buildah-debuginfoUpgrade buildahUpgrade go-toolsetUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade podman-debugsource | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade podman-testsUpgrade crunUpgrade container-selinuxUpgrade runcUpgrade podman-catatonitUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade criuUpgrade containernetworking-pluginsUpgrade udicaUpgrade criu-develUpgrade podman-gvproxyUpgrade podman-remoteUpgrade python3-criuUpgrade podman-dockerUpgrade critUpgrade podman-pluginsUpgrade skopeo-testsUpgrade podmanUpgrade buildah-testsUpgrade python3-podmanUpgrade netavarkUpgrade buildahUpgrade aardvark-dnsUpgrade containers-commonUpgrade fuse-overlayfsUpgrade skopeoUpgrade conmonUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade libslirp | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade skopeoUpgrade openshift-clientsUpgrade podmanUpgrade microshift | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade podmanUpgrade conmon-debugsourceUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade udicaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade netavarkUpgrade toolbox-debuginfoUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade skopeoUpgrade python3-criuUpgrade runcUpgrade toolboxUpgrade podman-catatonitNo solution existsUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade golang-binUpgrade critUpgrade podman-remoteUpgrade buildah-debugsourceUpgrade golang-docsUpgrade golang-testsUpgrade buildah-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-debugsourceUpgrade delve-debugsourceUpgrade buildahUpgrade libslirp-debugsourceUpgrade crunUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade criu-debuginfoUpgrade slirp4netns-debugsourceUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade conmonUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade delveUpgrade podman-gvproxyUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade golang-miscUpgrade criu-libsUpgrade containers-commonUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade criu-develUpgrade skopeo-debuginfoUpgrade python3-podmanUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade golangUpgrade libslirp-develUpgrade golang-srcUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade libslirpUpgrade skopeo-testsUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade podman-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade delve-debuginfoUpgrade containernetworking-plugins-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade conmonUpgrade containers-commonUpgrade criu-develUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade slirp4netns-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-debugsourceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade critUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade podman-remoteUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade criuUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade netavarkUpgrade runcUpgrade buildah-debuginfoUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade libslirpUpgrade slirp4netnsUpgrade podman-testsUpgrade buildah-testsUpgrade podman-catatonit | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19-docUpgrade go1.20Upgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.19Upgrade go1.20-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.19-srcUpgrade golang-1.20-goUpgrade golang-1.19-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub