What is CVE-2023-39319?

CVE-2023-39319 is a medium-severity software vulnerability (Cross-site scripting (XSS)) with a CVSS score of 6.1. The html/template package does not apply the proper rules for handling occurrences of " contexts. This may cause the template parser to improperly consider script contexts to be

Is CVE-2023-39319 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

What products does CVE-2023-39319 affect?

Tracked products affected include Go. Check the version you run to see whether it is affected.

How do I fix CVE-2023-39319?

Apply the vendor fix in your normal patch cycle. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2023-39319 — MEDIUM severity vulnerability