← CVE Intelligence

CVE-2023-3978

Improper rendering of text nodes in golang.org/x/net/html PUBLISHED

Description (CNA)

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

Affected (CNA)

Vendor / productVersions
golang.org/x/net / golang.org/x/net/htmlaffected 0 before 0.13.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.