UNKNOWN Go

Improper handling of special tags within script contexts in html/template

GO-2023-2043 · BIT-golang-2023-39319 · CVE-2023-39319

Published · Modified

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Description

The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in