Unrated severityNVD Advisory· Published Dec 14, 2020· Updated Sep 16, 2024
CVE-2020-29510
CVE-2020-29510
Description
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/mattermost/xml-roundtrip-validator/blob/master/advisories/unstable-directives.mdmitrex_refsource_MISC
- security.netapp.com/advisory/ntap-20210129-0006/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.