CVE-2018-17143

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in…

published September 17, 2018

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02772 · 86.2th percentile
Published
2018-09-17T14:00Z
EPSS history
Timeline
  • 17 SEP 14:00Z
    The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in…
    cvelistv5