Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade python3-podmanUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade podman-remoteUpgrade buildah-testsUpgrade criuUpgrade netavarkUpgrade buildahUpgrade podman-dockerUpgrade aardvark-dnsUpgrade udicaUpgrade conmonUpgrade libslirp-develUpgrade python3-criuUpgrade podman-testsUpgrade podmanUpgrade container-selinuxUpgrade podman-pluginsUpgrade runcUpgrade libslirpUpgrade containernetworking-pluginsUpgrade skopeoUpgrade containers-commonUpgrade critUpgrade toolboxUpgrade criu-develUpgrade crunUpgrade criu-libsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade containerdUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade containerd-stressUpgrade golangUpgrade golang-race | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-raceUpgrade golang-binUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade podman-pluginsUpgrade toolbox-debugsourceUpgrade golang-testsUpgrade criu-libsUpgrade containers-commonUpgrade criu-debuginfoUpgrade toolboxUpgrade podman-catatonitUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade podman-remote-debuginfoUpgrade golang-binUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade runcUpgrade golangUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade delve-debugsourceUpgrade delveUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade delve-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade golang-miscUpgrade podmanUpgrade golang-srcUpgrade netavarkUpgrade skopeoUpgrade golang-docsUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade libslirpUpgrade golang-raceUpgrade crun-debuginfoUpgrade buildah-testsUpgrade python3-criuUpgrade slirp4netnsUpgrade podman-dockerUpgrade container-selinuxUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade buildah-debuginfoUpgrade go-toolsetUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade crunUpgrade conmon-debuginfoUpgrade conmonUpgrade slirp4netns-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade containers-commonUpgrade buildah-testsUpgrade buildahUpgrade criu-libsUpgrade skopeoUpgrade fuse-overlayfsUpgrade conmonUpgrade python3-podmanUpgrade libslirp-develUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade aardvark-dnsUpgrade critUpgrade podman-catatonitUpgrade skopeo-testsUpgrade criuUpgrade udicaUpgrade podman-remoteUpgrade runcUpgrade criu-develUpgrade python3-criuUpgrade podman-gvproxyUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade container-selinuxUpgrade cockpit-podmanUpgrade podman-testsUpgrade crunUpgrade podman-pluginsUpgrade podmanUpgrade slirp4netns | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade microshiftUpgrade cri-toolsUpgrade skopeoUpgrade openshift-clients | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade golangUpgrade podman-gvproxyUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade python3-podmanUpgrade delveUpgrade container-selinuxUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade golang-srcUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade slirp4netns-debuginfoUpgrade golang-miscUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade cockpit-podmanUpgrade podman-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade libslirpUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade criu-develUpgrade go-toolsetUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade udicaUpgrade podman-remoteUpgrade podman-dockerUpgrade libslirp-debugsourceUpgrade golang-testsUpgrade podman-catatonitUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade crunUpgrade golang-docsUpgrade criu-libs-debuginfoUpgrade toolbox-debuginfoUpgrade runcUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debuginfoUpgrade buildahUpgrade golang-binUpgrade criuUpgrade podman-gvproxy-debuginfoUpgrade netavarkUpgrade skopeoUpgrade critUpgrade criu-debugsourceUpgrade buildah-testsUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade podmanUpgrade delve-debugsourceUpgrade python3-criuNo solution existsUpgrade fuse-overlayfs-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade buildah-testsUpgrade netavarkUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade conmon-debugsourceUpgrade python3-criuUpgrade buildah-debuginfoUpgrade criu-libs-debuginfoUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade podman-testsUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade fuse-overlayfsUpgrade libslirpUpgrade podman-gvproxyUpgrade criuUpgrade runcUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade containers-commonUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade critUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade podman-remoteUpgrade crunUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade podman-debugsourceUpgrade criu-develUpgrade libslirp-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.20Upgrade go1.20-raceUpgrade go1.19-docUpgrade go1.19-raceUpgrade go1.19Upgrade go1.20-doc | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.19-goUpgrade golang-1.19-srcUpgrade golang-1.20-go | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub