Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeoUpgrade podman-testsUpgrade criu-libsUpgrade crunUpgrade udicaUpgrade python3-criuUpgrade libslirp-develUpgrade critUpgrade container-selinuxUpgrade libslirpUpgrade toolboxUpgrade skopeo-testsUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade podman-pluginsUpgrade podmanUpgrade containernetworking-pluginsUpgrade criu-develUpgrade containers-commonUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade criuUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-dockerUpgrade podman-catatonitUpgrade netavarkUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-remoteUpgrade buildah-testsUpgrade toolbox-testsUpgrade aardvark-dns | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golangUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade containerdUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade golang-race | Jun 6, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-raceUpgrade golang-binUpgrade golang-sharedUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-misc | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade containers-commonUpgrade critUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade golangUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolboxUpgrade udicaUpgrade golang-binUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade skopeoUpgrade delve-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade podmanUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade netavarkUpgrade skopeo-testsUpgrade criuUpgrade fuse-overlayfsUpgrade golang-docsUpgrade golang-miscUpgrade criu-debugsourceUpgrade golang-srcUpgrade crun-debugsourceUpgrade delveUpgrade criu-libsUpgrade podman-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade runcUpgrade toolbox-debugsourceUpgrade golang-testsUpgrade podman-debugsourceUpgrade libslirpUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade go-toolsetUpgrade python3-criuUpgrade buildahUpgrade crun-debuginfoUpgrade buildah-testsUpgrade slirp4netnsUpgrade python3-podmanUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade podman-gvproxyUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade conmonUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade container-selinux | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade podman-catatonitUpgrade slirp4netnsUpgrade container-selinuxUpgrade python3-criuUpgrade crunUpgrade runcUpgrade cockpit-podmanUpgrade podman-testsUpgrade criu-develUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade podmanUpgrade criuUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade udicaUpgrade podman-pluginsUpgrade critUpgrade podman-remoteUpgrade containers-commonUpgrade buildahUpgrade aardvark-dnsUpgrade criu-libsUpgrade libslirp-develUpgrade libslirpUpgrade netavarkUpgrade python3-podmanUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade conmon | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade cri-toolsUpgrade skopeoUpgrade microshiftUpgrade podman | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade golang-raceUpgrade go-toolsetUpgrade python3-podmanUpgrade container-selinuxUpgrade golangUpgrade conmon-debuginfoUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade delveUpgrade containers-commonUpgrade criu-debuginfoUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-pluginsUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade conmonUpgrade podman-debugsourceUpgrade crun-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade podman-testsUpgrade libslirpUpgrade golang-srcUpgrade golang-miscUpgrade skopeo-debuginfoUpgrade udicaUpgrade libslirp-debuginfoUpgrade podman-dockerUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade criuUpgrade critUpgrade skopeoUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade golang-binUpgrade runcUpgrade crunNo solution existsUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildahUpgrade toolbox-testsUpgrade podmanUpgrade toolboxUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade python3-criuUpgrade podman-catatonitUpgrade podman-remoteUpgrade golang-testsUpgrade golang-docsUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade toolbox-debuginfoUpgrade fuse-overlayfsUpgrade netavarkUpgrade criu-debugsource | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade crunUpgrade podman-debugsourceUpgrade conmonUpgrade criu-develUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade python3-criuUpgrade conmon-debugsourceUpgrade runcUpgrade netavarkUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade podman-testsUpgrade libslirpUpgrade libslirp-debuginfoUpgrade buildahUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade crun-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.20Upgrade go1.19-docUpgrade go1.20-docUpgrade go1.19 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20-goUpgrade golang-1.19-srcUpgrade golang-1.19-goUpgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.20 | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub