CVE-2020-29509

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
Configurations

Configuration 1 (hide)

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:netapp:trident:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-12-14 20:15

Updated : 2024-02-04 21:23


NVD link : CVE-2020-29509

Mitre link : CVE-2020-29509

CVE.ORG link : CVE-2020-29509


JSON object : View

Products Affected

netapp

  • trident

golang

  • go
CWE
NVD-CWE-Other CWE-115

Misinterpretation of Input