Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade toolbox-testsUpgrade podman-remoteUpgrade buildahUpgrade python3-podmanUpgrade slirp4netnsUpgrade criuUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade podman-dockerUpgrade podman-testsUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade containers-commonUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade crunUpgrade skopeo-testsUpgrade udicaUpgrade container-selinuxUpgrade skopeoUpgrade libslirp-develUpgrade libslirpUpgrade conmonUpgrade runcUpgrade critUpgrade toolboxUpgrade podman | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade containerd-stressUpgrade golang-testsUpgrade golang-srcUpgrade containerdUpgrade containerd-debuginfoUpgrade golang-docsUpgrade golangUpgrade golang-sharedUpgrade golang-binUpgrade golang-misc | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade golang | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade golangUpgrade golang-srcUpgrade libslirp-develUpgrade criuUpgrade criu-debugsourceUpgrade golang-docsUpgrade netavarkUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade golang-miscUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolboxUpgrade containers-commonUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade golang-testsUpgrade runcUpgrade containernetworking-pluginsUpgrade delveUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remoteUpgrade skopeoUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade criu-develUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade delve-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libs-debuginfoUpgrade udicaUpgrade golang-binUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade container-selinuxUpgrade aardvark-dnsUpgrade python3-criuUpgrade podman-testsUpgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade crunUpgrade slirp4netnsUpgrade python3-podmanUpgrade buildah-debuginfoUpgrade buildahUpgrade go-toolsetUpgrade libslirpUpgrade conmonUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade podman-gvproxyUpgrade python3-criuUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade criuUpgrade podmanUpgrade criu-develUpgrade cockpit-podmanUpgrade container-selinuxUpgrade podman-remoteUpgrade podman-testsUpgrade podman-catatonitUpgrade slirp4netnsUpgrade udicaUpgrade crunUpgrade runcUpgrade critUpgrade skopeoUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade libslirpUpgrade containers-commonUpgrade buildah-testsUpgrade buildahUpgrade conmonUpgrade criu-libsUpgrade python3-podmanUpgrade netavark | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade microshiftUpgrade podmanUpgrade cri-toolsUpgrade openshift-clientsUpgrade skopeo | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade criu-libsUpgrade conmon-debuginfoUpgrade containers-commonUpgrade container-selinuxUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade libslirp-develUpgrade criu-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade golangUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debuginfoUpgrade delveUpgrade crun-debugsourceUpgrade podman-testsUpgrade aardvark-dnsUpgrade buildah-tests-debuginfoUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade golang-miscUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade criu-develUpgrade golang-raceUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade python3-podmanUpgrade conmonUpgrade go-toolsetUpgrade golang-docsUpgrade python3-criuUpgrade critUpgrade criu-debugsourceUpgrade crunUpgrade fuse-overlayfsUpgrade libslirp-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade podmanUpgrade udicaUpgrade buildah-debugsourceUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade golang-binUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade toolboxUpgrade podman-debuginfoUpgrade golang-testsUpgrade toolbox-testsUpgrade criu-libs-debuginfoUpgrade podman-catatonit-debuginfoNo solution existsUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade criuUpgrade buildah-testsUpgrade skopeoUpgrade netavark | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade critUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade containers-commonUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade crunUpgrade criu-libsUpgrade libslirp-develUpgrade podman-pluginsUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade libslirpUpgrade buildahUpgrade netavarkUpgrade runcUpgrade conmon-debugsourceUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade criuUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade criu-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19-docUpgrade go1.20Upgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.19Upgrade go1.20-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.19-goUpgrade golang-1.19-srcUpgrade golang-1.20-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub