CVE-2020-29510

CVE-2020-29510 is a medium-severity vulnerability in the Go encoding/xml package (versions 1.15 and earlier), affecting products like golang go and NetApp Trident. It allows attackers to craft XML inputs that behave inconsistently during different processing stages, potentially leading to authentication bypass, as highlighted by a BleepingComputer article on SAML bypass. With a CVSS score of 5.6, this vulnerability has a network attack vector and low impact on confidentiality, integrity, and availability, but requires high attack complexity. There is no evidence of active exploitation, nor are there public exploits available in Metasploit or ExploitDB, and community discussion is minimal.