CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. See the original NVD description below for full technical details.
CVE
CVE-2021-33195
Severity
HIGH
CVSS
7.3
EPSS
3.23%
Original NVD Description
Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
Related CVEs
Other vulnerabilities affecting the same vendor(s)