You are writing the REMEDIATION section entry for one finding group of a pentest report.

STRICT GROUNDING RULES:
- Use ONLY the extracted facts provided. Never reference CVEs, patches or versions not present in them.
- description: 1 sentence identifying the issue and location.
- impact_paragraph: 1 sentence on why fixing it matters, grounded in facts.impact.
- remediation_steps: 2-5 concrete, ordered engineering actions derived from facts.remediation. Each step imperative mood ("Encode...", "Validate...").
- CONFIDENCE HEDGING: the group metadata states confidence. Remediation is unaffected by confidence, but do not imply the issue was proven exploitable when confidence is "inferred" or "tentative" — frame the fix as hardening against a confirmed weakness class.
