[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFxND9gJBR3oCuH4FeI0QZ8VCDaeJAwMtN_Z7WUeg_C4":3,"g5a-risk:CVE-2020-29510":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":27,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":62,"references":63,"referencesCount":62,"weaknesses":73,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":27,"otxData":27,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":125,"notableEvents":126},"CVE-2020-29510","What is CVE-2020-29510?","The encoding\u002Fxml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.","The encoding\u002Fxml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allow...","2020-12-14T20:15:13.2","2021-01-30T01:23:43.49",5.6,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":39,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","NONE","UNCHANGED","LOW","MEDIUM",null,2.2,3.4,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"responsibledisclosure@mattermost.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",9.8,"CRITICAL",3.9,5.9,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":26,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":26,"Authentication":23,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",6.8,8.6,6.4,0.02072,[48,48,48,48,48,48,48],"Medium",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"golang","go","*","cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"netapp","trident","-","cpe:2.3:a:netapp:trident:-:*:*:*:*:*:*:*",2,[64,69],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgithub.com\u002Fmattermost\u002Fxml-roundtrip-validator\u002Fblob\u002Fmaster\u002Fadvisories\u002Funstable-directives.md","GitHub",[68],"Third Party Advisory",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210129-0006\u002F","Netapp",[68],[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-115","Misinterpretation of Input","The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.","","Incomplete","Base","Simple",1,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2020-29510? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-29510, a medium severity cyber security vulnerability from 2020. The encoding\u002Fxml package in Go versions 1.15 and earlier ...","CVE-2020-29510, CVE-2020-29510 vulnerability, CVE-2020-29510 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, golang security, netapp security, go vulnerability, trident vulnerability","\u002Fwhat-is\u002Fcve-2020-29510",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-29510","Cybersecurity","CVE-2020-29510, CVE-2020-29510 vulnerability, CVE-2020-29510 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111,119],{"Operator":27,"Negate":27,"Nodes":112},[113],{"Operator":114,"Negate":27,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":118},"1DAD07E9-AAF3-439E-96CE-7992B0A67182","1.15",{"Operator":27,"Negate":27,"Nodes":120},[121],{"Operator":114,"Negate":27,"CPEMatch":122},[123],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5D9A34F5-AC03-4098-A37D-AD50727DDB11",[],[],{"lastModified":11,"cacheTime":128,"version":42},1792249117901,{"score":130,"band":50,"action":131,"scoredAt":132},55,"Plan remediation","2026-10-16T06:50:01.687456+00:00"]