[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6RS0C6UIGivoCbJIaQe1bmlQz3E05l5e8_PuVNIOlJI":3,"g5a-risk:CVE-2018-17848":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":56,"weaknesses":71,"weaknessesCount":80,"isActivelyExploited":81,"cisaInfo":26,"otxData":26,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":125,"notableEvents":126},"CVE-2018-17848","What is CVE-2018-17848?","The html package (aka x\u002Fnet\u002Fhtml) through 2018-09-25 in Go mishandles , leading to a \"panic: runtime error\" (index out of range) in (*insertionModeStack).pop in node.go, called from inHeadIM, during an html.Parse call.","The html package (aka x\u002Fnet\u002Fhtml) through 2018-09-25 in Go mishandles , leading to a \"panic: runtime error\" (index out of range) in (*insertionModeStack).pop...","2018-10-01T08:29:02.303","2023-11-07T02:54:33.343",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.02234,[39,39,39,39,39,39,39],"High",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"golang","net","*","cpe:2.3:a:golang:net:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"fedoraproject","fedora","28","cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"29","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",3,[58,64,68],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fgithub.com\u002Fgolang\u002Fgo\u002Fissues\u002F27846","GitHub",[62,63],"Exploit","Vendor Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FLREEWY6KNLHRWFZ7OT4HVLMVVCGGUHON\u002F","Fedoraproject",[],{"url":69,"source":66,"tags":70},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUKRCI7WIOCOCD3H7NXWRGIRABTQOZOBK\u002F",[],[72],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-129","Improper Validation of Array Index","The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.","","Draft","Variant","Simple",1,false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2018-17848? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-17848, a high severity cyber security vulnerability from 2018. The html package (aka x\u002Fnet\u002Fhtml) through 2018-09-25 in Go ...","CVE-2018-17848, CVE-2018-17848 vulnerability, CVE-2018-17848 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, golang security, fedoraproject security, net vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2018-17848",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-17848","Cybersecurity","CVE-2018-17848, CVE-2018-17848 vulnerability, CVE-2018-17848 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109,117],{"Operator":26,"Negate":26,"Nodes":110},[111],{"Operator":112,"Negate":26,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":116},"4EE877B1-D968-44D2-99FB-26EEF7739E3D","2018-09-25",{"Operator":26,"Negate":26,"Nodes":118},[119],{"Operator":112,"Negate":26,"CPEMatch":120},[121,123],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D100F7CE-FC64-4CC6-852A-6136D72DA419",[],[],{"lastModified":11,"cacheTime":128,"version":32},1792350061965,{"score":130,"band":131,"action":132,"scoredAt":133},48,"Medium","Plan remediation","2026-10-16T06:44:52.991017+00:00"]