CVE-2023-39319

Summary

CVE-2023-39319 is a vulnerability affecting the html/template package. The issue lies in the package's handling of "<script>", "<!--", and "</script>" within JS literals in <script> contexts. Instead of applying the correct rules, the parser may prematurely terminate script contexts, leading to insufficient escaping. A malicious actor could exploit this flaw to execute cross-site scripting (XSS) attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.