CVE-2023-39318 Detail

CVE-2023-39318

Score / Severity

6.1

Medium

CVE Descriptions

Improper handling of HTML-like comments in script contexts in html/template

The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in

Products Mentioned

Configuraton 0

Golang>>Go >> Version To (excluding) 1.20.8

Golang>>Go >> Version - (Open CPE detail)
Golang>>Go >> Version 0.0.0-20201203163018-be400aefbc4c (Open CPE detail)
Golang>>Go >> Version 1.0 (Open CPE detail)
Golang>>Go >> Version 1.0.1 (Open CPE detail)
Golang>>Go >> Version 1.0.2 (Open CPE detail)
Golang>>Go >> Version 1.0.3 (Open CPE detail)
Golang>>Go >> Version 1.1 (Open CPE detail)
Golang>>Go >> Version 1.1 (Open CPE detail)
Golang>>Go >> Version 1.1 (Open CPE detail)
Golang>>Go >> Version 1.1.1 (Open CPE detail)
Golang>>Go >> Version 1.1.2 (Open CPE detail)
Golang>>Go >> Version 1.2 (Open CPE detail)
Golang>>Go >> Version 1.2 (Open CPE detail)
Golang>>Go >> Version 1.2 (Open CPE detail)
Golang>>Go >> Version 1.2 (Open CPE detail)
Golang>>Go >> Version 1.2 (Open CPE detail)
Golang>>Go >> Version 1.2.1 (Open CPE detail)
Golang>>Go >> Version 1.2.2 (Open CPE detail)
Golang>>Go >> Version 1.3 (Open CPE detail)
Golang>>Go >> Version 1.3 (Open CPE detail)
Golang>>Go >> Version 1.3 (Open CPE detail)
Golang>>Go >> Version 1.3 (Open CPE detail)
Golang>>Go >> Version 1.3 (Open CPE detail)
Golang>>Go >> Version 1.3.1 (Open CPE detail)
Golang>>Go >> Version 1.3.2 (Open CPE detail)
Golang>>Go >> Version 1.3.3 (Open CPE detail)
Golang>>Go >> Version 1.4 (Open CPE detail)
Golang>>Go >> Version 1.4 (Open CPE detail)
Golang>>Go >> Version 1.4 (Open CPE detail)
Golang>>Go >> Version 1.4 (Open CPE detail)
Golang>>Go >> Version 1.4.1 (Open CPE detail)
Golang>>Go >> Version 1.4.2 (Open CPE detail)
Golang>>Go >> Version 1.4.3 (Open CPE detail)
Golang>>Go >> Version 1.5 (Open CPE detail)
Golang>>Go >> Version 1.5 (Open CPE detail)
Golang>>Go >> Version 1.5 (Open CPE detail)
Golang>>Go >> Version 1.5 (Open CPE detail)
Golang>>Go >> Version 1.5 (Open CPE detail)
Golang>>Go >> Version 1.5.1 (Open CPE detail)
Golang>>Go >> Version 1.5.2 (Open CPE detail)
Golang>>Go >> Version 1.5.3 (Open CPE detail)
Golang>>Go >> Version 1.5.4 (Open CPE detail)
Golang>>Go >> Version 1.6 (Open CPE detail)
Golang>>Go >> Version 1.6 (Open CPE detail)
Golang>>Go >> Version 1.6 (Open CPE detail)
Golang>>Go >> Version 1.6 (Open CPE detail)
Golang>>Go >> Version 1.6 (Open CPE detail)
Golang>>Go >> Version 1.6 (Open CPE detail)
Golang>>Go >> Version 1.6.1 (Open CPE detail)
Golang>>Go >> Version 1.6.2 (Open CPE detail)
Golang>>Go >> Version 1.6.3 (Open CPE detail)
Golang>>Go >> Version 1.6.4 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7 (Open CPE detail)
Golang>>Go >> Version 1.7.1 (Open CPE detail)
Golang>>Go >> Version 1.7.2 (Open CPE detail)
Golang>>Go >> Version 1.7.3 (Open CPE detail)
Golang>>Go >> Version 1.7.4 (Open CPE detail)
Golang>>Go >> Version 1.7.5 (Open CPE detail)
Golang>>Go >> Version 1.7.6 (Open CPE detail)
Golang>>Go >> Version 1.8 (Open CPE detail)
Golang>>Go >> Version 1.8 (Open CPE detail)
Golang>>Go >> Version 1.8 (Open CPE detail)
Golang>>Go >> Version 1.8 (Open CPE detail)
Golang>>Go >> Version 1.8 (Open CPE detail)
Golang>>Go >> Version 1.8 (Open CPE detail)
Golang>>Go >> Version 1.8.1 (Open CPE detail)
Golang>>Go >> Version 1.8.2 (Open CPE detail)
Golang>>Go >> Version 1.8.3 (Open CPE detail)
Golang>>Go >> Version 1.8.4 (Open CPE detail)
Golang>>Go >> Version 1.8.5 (Open CPE detail)
Golang>>Go >> Version 1.8.5 (Open CPE detail)
Golang>>Go >> Version 1.8.5 (Open CPE detail)
Golang>>Go >> Version 1.8.6 (Open CPE detail)
Golang>>Go >> Version 1.8.7 (Open CPE detail)
Golang>>Go >> Version 1.9 (Open CPE detail)
Golang>>Go >> Version 1.9 (Open CPE detail)
Golang>>Go >> Version 1.9 (Open CPE detail)
Golang>>Go >> Version 1.9 (Open CPE detail)
Golang>>Go >> Version 1.9 (Open CPE detail)
Golang>>Go >> Version 1.9.1 (Open CPE detail)
Golang>>Go >> Version 1.9.2 (Open CPE detail)
Golang>>Go >> Version 1.9.3 (Open CPE detail)
Golang>>Go >> Version 1.9.4 (Open CPE detail)
Golang>>Go >> Version 1.9.5 (Open CPE detail)
Golang>>Go >> Version 1.9.6 (Open CPE detail)
Golang>>Go >> Version 1.9.7 (Open CPE detail)
Golang>>Go >> Version 1.10 (Open CPE detail)
Golang>>Go >> Version 1.10 (Open CPE detail)
Golang>>Go >> Version 1.10 (Open CPE detail)
Golang>>Go >> Version 1.10 (Open CPE detail)
Golang>>Go >> Version 1.10 (Open CPE detail)
Golang>>Go >> Version 1.10.1 (Open CPE detail)
Golang>>Go >> Version 1.10.2 (Open CPE detail)
Golang>>Go >> Version 1.10.3 (Open CPE detail)
Golang>>Go >> Version 1.10.4 (Open CPE detail)
Golang>>Go >> Version 1.10.5 (Open CPE detail)
Golang>>Go >> Version 1.10.6 (Open CPE detail)
Golang>>Go >> Version 1.10.7 (Open CPE detail)
Golang>>Go >> Version 1.10.8 (Open CPE detail)
Golang>>Go >> Version 1.11.0 (Open CPE detail)
Golang>>Go >> Version 1.11.0 (Open CPE detail)
Golang>>Go >> Version 1.11.0 (Open CPE detail)
Golang>>Go >> Version 1.11.0 (Open CPE detail)
Golang>>Go >> Version 1.11.0 (Open CPE detail)
Golang>>Go >> Version 1.11.0 (Open CPE detail)
Golang>>Go >> Version 1.11.1 (Open CPE detail)
Golang>>Go >> Version 1.11.2 (Open CPE detail)
Golang>>Go >> Version 1.11.3 (Open CPE detail)
Golang>>Go >> Version 1.11.4 (Open CPE detail)
Golang>>Go >> Version 1.11.5 (Open CPE detail)
Golang>>Go >> Version 1.11.6 (Open CPE detail)
Golang>>Go >> Version 1.11.7 (Open CPE detail)
Golang>>Go >> Version 1.11.8 (Open CPE detail)
Golang>>Go >> Version 1.11.9 (Open CPE detail)
Golang>>Go >> Version 1.11.10 (Open CPE detail)
Golang>>Go >> Version 1.11.11 (Open CPE detail)
Golang>>Go >> Version 1.11.12 (Open CPE detail)
Golang>>Go >> Version 1.11.13 (Open CPE detail)
Golang>>Go >> Version 1.12 (Open CPE detail)
Golang>>Go >> Version 1.12 (Open CPE detail)
Golang>>Go >> Version 1.12 (Open CPE detail)
Golang>>Go >> Version 1.12 (Open CPE detail)
Golang>>Go >> Version 1.12 (Open CPE detail)
Golang>>Go >> Version 1.12.0 (Open CPE detail)
Golang>>Go >> Version 1.12.0 (Open CPE detail)
Golang>>Go >> Version 1.12.0 (Open CPE detail)
Golang>>Go >> Version 1.12.0 (Open CPE detail)
Golang>>Go >> Version 1.12.0 (Open CPE detail)
Golang>>Go >> Version 1.12.1 (Open CPE detail)
Golang>>Go >> Version 1.12.2 (Open CPE detail)
Golang>>Go >> Version 1.12.3 (Open CPE detail)
Golang>>Go >> Version 1.12.4 (Open CPE detail)
Golang>>Go >> Version 1.12.5 (Open CPE detail)
Golang>>Go >> Version 1.12.6 (Open CPE detail)
Golang>>Go >> Version 1.12.7 (Open CPE detail)
Golang>>Go >> Version 1.12.8 (Open CPE detail)
Golang>>Go >> Version 1.12.9 (Open CPE detail)
Golang>>Go >> Version 1.12.10 (Open CPE detail)
Golang>>Go >> Version 1.12.11 (Open CPE detail)
Golang>>Go >> Version 1.12.12 (Open CPE detail)
Golang>>Go >> Version 1.12.13 (Open CPE detail)
Golang>>Go >> Version 1.12.14 (Open CPE detail)
Golang>>Go >> Version 1.12.15 (Open CPE detail)
Golang>>Go >> Version 1.12.16 (Open CPE detail)
Golang>>Go >> Version 1.12.17 (Open CPE detail)
Golang>>Go >> Version 1.13 (Open CPE detail)
Golang>>Go >> Version 1.13 (Open CPE detail)
Golang>>Go >> Version 1.13 (Open CPE detail)
Golang>>Go >> Version 1.13 (Open CPE detail)
Golang>>Go >> Version 1.13.1 (Open CPE detail)
Golang>>Go >> Version 1.13.2 (Open CPE detail)
Golang>>Go >> Version 1.13.3 (Open CPE detail)
Golang>>Go >> Version 1.13.4 (Open CPE detail)
Golang>>Go >> Version 1.13.5 (Open CPE detail)
Golang>>Go >> Version 1.13.6 (Open CPE detail)
Golang>>Go >> Version 1.13.7 (Open CPE detail)
Golang>>Go >> Version 1.13.8 (Open CPE detail)
Golang>>Go >> Version 1.13.9 (Open CPE detail)
Golang>>Go >> Version 1.13.10 (Open CPE detail)
Golang>>Go >> Version 1.13.11 (Open CPE detail)
Golang>>Go >> Version 1.13.13 (Open CPE detail)
Golang>>Go >> Version 1.13.15 (Open CPE detail)
Golang>>Go >> Version 1.14 (Open CPE detail)
Golang>>Go >> Version 1.14 (Open CPE detail)
Golang>>Go >> Version 1.14 (Open CPE detail)
Golang>>Go >> Version 1.14.0 (Open CPE detail)
Golang>>Go >> Version 1.14.1 (Open CPE detail)
Golang>>Go >> Version 1.14.2 (Open CPE detail)
Golang>>Go >> Version 1.14.3 (Open CPE detail)
Golang>>Go >> Version 1.14.5 (Open CPE detail)
Golang>>Go >> Version 1.14.7 (Open CPE detail)
Golang>>Go >> Version 1.14.8 (Open CPE detail)
Golang>>Go >> Version 1.14.12 (Open CPE detail)
Golang>>Go >> Version 1.14.14 (Open CPE detail)
Golang>>Go >> Version 1.15 (Open CPE detail)
Golang>>Go >> Version 1.15 (Open CPE detail)
Golang>>Go >> Version 1.15 (Open CPE detail)
Golang>>Go >> Version 1.15 (Open CPE detail)
Golang>>Go >> Version 1.15.1 (Open CPE detail)
Golang>>Go >> Version 1.15.2 (Open CPE detail)
Golang>>Go >> Version 1.15.3 (Open CPE detail)
Golang>>Go >> Version 1.15.4 (Open CPE detail)
Golang>>Go >> Version 1.15.5 (Open CPE detail)
Golang>>Go >> Version 1.15.6 (Open CPE detail)
Golang>>Go >> Version 1.15.7 (Open CPE detail)
Golang>>Go >> Version 1.15.8 (Open CPE detail)
Golang>>Go >> Version 1.15.9 (Open CPE detail)
Golang>>Go >> Version 1.15.10 (Open CPE detail)
Golang>>Go >> Version 1.15.11 (Open CPE detail)
Golang>>Go >> Version 1.15.12 (Open CPE detail)
Golang>>Go >> Version 1.15.13 (Open CPE detail)
Golang>>Go >> Version 1.16.0 (Open CPE detail)
Golang>>Go >> Version 1.16.0 (Open CPE detail)
Golang>>Go >> Version 1.16.1 (Open CPE detail)
Golang>>Go >> Version 1.16.2 (Open CPE detail)
Golang>>Go >> Version 1.16.3 (Open CPE detail)
Golang>>Go >> Version 1.16.4 (Open CPE detail)
Golang>>Go >> Version 1.16.5 (Open CPE detail)
Golang>>Go >> Version 1.16.6 (Open CPE detail)
Golang>>Go >> Version 1.16.7 (Open CPE detail)
Golang>>Go >> Version 1.16.8 (Open CPE detail)
Golang>>Go >> Version 1.16.9 (Open CPE detail)
Golang>>Go >> Version 1.16.10 (Open CPE detail)
Golang>>Go >> Version 1.16.11 (Open CPE detail)
Golang>>Go >> Version 1.16.12 (Open CPE detail)
Golang>>Go >> Version 1.16.13 (Open CPE detail)
Golang>>Go >> Version 1.16.14 (Open CPE detail)
Golang>>Go >> Version 1.16.15 (Open CPE detail)
Golang>>Go >> Version 1.17 (Open CPE detail)
Golang>>Go >> Version 1.17 (Open CPE detail)
Golang>>Go >> Version 1.17 (Open CPE detail)
Golang>>Go >> Version 1.17 (Open CPE detail)
Golang>>Go >> Version 1.17.0 (Open CPE detail)
Golang>>Go >> Version 1.17.1 (Open CPE detail)
Golang>>Go >> Version 1.17.2 (Open CPE detail)
Golang>>Go >> Version 1.17.3 (Open CPE detail)
Golang>>Go >> Version 1.17.4 (Open CPE detail)
Golang>>Go >> Version 1.17.5 (Open CPE detail)
Golang>>Go >> Version 1.17.6 (Open CPE detail)
Golang>>Go >> Version 1.17.7 (Open CPE detail)
Golang>>Go >> Version 1.17.8 (Open CPE detail)
Golang>>Go >> Version 1.17.9 (Open CPE detail)
Golang>>Go >> Version 1.17.11 (Open CPE detail)
Golang>>Go >> Version 1.17.12 (Open CPE detail)
Golang>>Go >> Version 1.17.13 (Open CPE detail)
Golang>>Go >> Version 1.18.0 (Open CPE detail)
Golang>>Go >> Version 1.18.0 (Open CPE detail)
Golang>>Go >> Version 1.18.0 (Open CPE detail)
Golang>>Go >> Version 1.18.0 (Open CPE detail)
Golang>>Go >> Version 1.18.1 (Open CPE detail)
Golang>>Go >> Version 1.18.3 (Open CPE detail)
Golang>>Go >> Version 1.18.4 (Open CPE detail)
Golang>>Go >> Version 1.18.5 (Open CPE detail)
Golang>>Go >> Version 1.18.6 (Open CPE detail)
Golang>>Go >> Version 1.18.7 (Open CPE detail)
Golang>>Go >> Version 1.18.9 (Open CPE detail)
Golang>>Go >> Version 1.19.0 (Open CPE detail)
Golang>>Go >> Version 1.19.0 (Open CPE detail)
Golang>>Go >> Version 1.19.0 (Open CPE detail)
Golang>>Go >> Version 1.19.0 (Open CPE detail)
Golang>>Go >> Version 1.19.0 (Open CPE detail)
Golang>>Go >> Version 1.19.1 (Open CPE detail)
Golang>>Go >> Version 1.19.2 (Open CPE detail)
Golang>>Go >> Version 1.19.4 (Open CPE detail)
Golang>>Go >> Version 1.19.5 (Open CPE detail)
Golang>>Go >> Version 1.19.6 (Open CPE detail)
Golang>>Go >> Version 1.19.7 (Open CPE detail)
Golang>>Go >> Version 1.19.8 (Open CPE detail)
Golang>>Go >> Version 1.19.9 (Open CPE detail)
Golang>>Go >> Version 1.19.10 (Open CPE detail)
Golang>>Go >> Version 1.19.11 (Open CPE detail)
Golang>>Go >> Version 1.19.12 (Open CPE detail)
Golang>>Go >> Version 1.20.0 (Open CPE detail)
Golang>>Go >> Version 1.20.0 (Open CPE detail)
Golang>>Go >> Version 1.20.0 (Open CPE detail)
Golang>>Go >> Version 1.20.0 (Open CPE detail)
Golang>>Go >> Version 1.20.1 (Open CPE detail)
Golang>>Go >> Version 1.20.2 (Open CPE detail)
Golang>>Go >> Version 1.20.3 (Open CPE detail)
Golang>>Go >> Version 1.20.4 (Open CPE detail)
Golang>>Go >> Version 1.20.5 (Open CPE detail)
Golang>>Go >> Version 1.20.6 (Open CPE detail)
Golang>>Go >> Version 1.20.7 (Open CPE detail)

Golang>>Go >> Version From (including) 1.21.0 To (excluding) 1.21.1

Golang>>Go >> Version 1.21.0 (Open CPE detail)
Golang>>Go >> Version 1.21.0 (Open CPE detail)
Golang>>Go >> Version 1.21.0 (Open CPE detail)
Golang>>Go >> Version 1.21.0 (Open CPE detail)
Golang>>Go >> Version 1.21.0 (Open CPE detail)
Golang>>Go >> Version 1.21.0-0 (Open CPE detail)

References

https://go.dev/issue/62196
Tags : Issue Tracking

https://go.dev/cl/526156
Tags : Patch

https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ
Tags : Mailing List, Release Notes

https://pkg.go.dev/vuln/GO-2023-2041
Tags : Vendor Advisory

https://security.netapp.com/advisory/ntap-20231020-0009/
Tags : Third Party Advisory

https://security.gentoo.org/glsa/202311-09

CVE-2023-39318 : Detail