[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNEOXt8BIYNl5uhwQ1Pe4ywKAUpFzmK79A56HXeopJEg":3,"g5a-risk:CVE-2020-29511":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":27,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":62,"references":63,"referencesCount":62,"weaknesses":73,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":27,"otxData":27,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":125,"notableEvents":126},"CVE-2020-29511","What is CVE-2020-29511?","The encoding\u002Fxml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.","The encoding\u002Fxml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which ...","2020-12-14T20:15:13.28","2023-07-27T15:19:58.2",5.6,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":39,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","NONE","UNCHANGED","LOW","MEDIUM",null,2.2,3.4,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":38},"responsibledisclosure@mattermost.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",9.8,"CRITICAL",3.9,5.9,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":26,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":26,"Authentication":23,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",6.8,8.6,6.4,0.01966,[48,48,48,48,48,48,48],"Medium",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"golang","go","*","cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"netapp","trident","-","cpe:2.3:a:netapp:trident:-:*:*:*:*:*:*:*",2,[64,69],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgithub.com\u002Fmattermost\u002Fxml-roundtrip-validator\u002Fblob\u002Fmaster\u002Fadvisories\u002Funstable-elements.md","GitHub",[68],"Third Party Advisory",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210129-0006\u002F","Netapp",[68],[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-115","Misinterpretation of Input","The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.","","Incomplete","Base","Simple",1,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2020-29511? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-29511, a medium severity cyber security vulnerability from 2020. The encoding\u002Fxml package in Go (all versions) does not co...","CVE-2020-29511, CVE-2020-29511 vulnerability, CVE-2020-29511 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, golang security, netapp security, go vulnerability, trident vulnerability","\u002Fwhat-is\u002Fcve-2020-29511",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-29511","Cybersecurity","CVE-2020-29511, CVE-2020-29511 vulnerability, CVE-2020-29511 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111,119],{"Operator":27,"Negate":27,"Nodes":112},[113],{"Operator":114,"Negate":27,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":118,"VersionEndIncluding":27},"D39D5C21-8281-429F-AC33-CE39821CA3EC","1.17",{"Operator":27,"Negate":27,"Nodes":120},[121],{"Operator":114,"Negate":27,"CPEMatch":122},[123],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5D9A34F5-AC03-4098-A37D-AD50727DDB11",[],[],{"lastModified":11,"cacheTime":128,"version":42},1792247840366,{"score":130,"band":50,"action":131,"scoredAt":132},54,"Plan remediation","2026-10-16T06:50:01.687783+00:00"]