VDB

RHSA-2023%3A1409

RHSA-2023%3A1409 PUBLISHED CVSS 6.5 MEDIUM

A flaw was found in Mongo. Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshaling Go objects into BSON. This flaw allows a malicious user to use a Go object with a specific string to inject additional fields into marshaled documents.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-ovn-kubernetes@sha256:92496b163d9eb7f93436d03460942f8456271600dfd3138fdbbc4feadc482930_arm64 as a component of Red Hat OpenShift Container Platform 4.12*, *, openshift4/ose-ovn-kubernetes@sha256:92496b163d9eb7f93436d03460942f8456271600dfd3138fdbbc4feadc482930_arm64
Red Hatopenshift4/ose-csi-driver-manila-rhel8-operator@sha256:d577b843a37e21bac221796e7201b116d84620c05ab3da523512e576bfc7016b_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, *, *
Red Hatopenshift4/driver-toolkit-rhel8@sha256:ccdb5e3417c1fc62b7cec3e22ade3d7bc52952d4721b1df1d5039a2b41303b4c_arm64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/driver-toolkit-rhel8@sha256:ccdb5e3417c1fc62b7cec3e22ade3d7bc52952d4721b1df1d5039a2b41303b4c_arm64, *, openshift4/driver-toolkit-rhel8@sha256:ccdb5e3417c1fc62b7cec3e22ade3d7bc52952d4721b1df1d5039a2b41303b4c_arm64
Red Hatopenshift4/ose-operator-registry@sha256:e48cf985b0b6333b8ea165ec1b4b6e5e6283363e5c238fe962b9ddcf46e1ce8f_s390x as a component of Red Hat OpenShift Container Platform 4.12*, *, *
Red Hatopenshift4/ose-cluster-baremetal-operator-rhel8@sha256:e288e6b9bf3268953dce40f455b6b0828a4b4026dc6e515d915db7a9afdc771c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-baremetal-operator-rhel8@sha256:e288e6b9bf3268953dce40f455b6b0828a4b4026dc6e515d915db7a9afdc771c_ppc64le, openshift4/ose-cluster-baremetal-operator-rhel8@sha256:e288e6b9bf3268953dce40f455b6b0828a4b4026dc6e515d915db7a9afdc771c_ppc64le, openshift4/ose-cluster-baremetal-operator-rhel8@sha256:e288e6b9bf3268953dce40f455b6b0828a4b4026dc6e515d915db7a9afdc771c_ppc64le
Red Hatopenshift4/ose-installer@sha256:8d9f83d4228e746719250c5d53dad5884c8392db0a6e7cda0dad9761c332deda_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-installer@sha256:8d9f83d4228e746719250c5d53dad5884c8392db0a6e7cda0dad9761c332deda_amd64, openshift4/ose-installer@sha256:8d9f83d4228e746719250c5d53dad5884c8392db0a6e7cda0dad9761c332deda_amd64, *
Red Hatopenshift4/ose-csi-driver-manila-rhel8-operator@sha256:d577b843a37e21bac221796e7201b116d84620c05ab3da523512e576bfc7016b_ppc64le as a component of Red Hat OpenShift Container Platform 4.12*, *, openshift4/ose-csi-driver-manila-rhel8-operator@sha256:d577b843a37e21bac221796e7201b116d84620c05ab3da523512e576bfc7016b_ppc64le
Red Hatopenshift4/ose-baremetal-rhel8-operator@sha256:bd650a9ad784ee53bada9b2cc8d3c70cba0b9bdf9cc8935f83e8df3bf158fe22_amd64 as a component of Red Hat OpenShift Container Platform 4.12*, *, *
Red Hatopenshift4/ose-docker-registry@sha256:2bda26570df5a3951b9ee01cbfef29b447eb284de679e4593d60a3fe5baf08d8_amd64 as a component of Red Hat OpenShift Container Platform 4.12*, *, *
Red Hatopenshift4/ose-cluster-network-operator@sha256:c70a4c8a29b3d54e3044d4453a165e1bdd5984cfa0ceadf4864c224999f66db7_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-cluster-network-operator@sha256:c70a4c8a29b3d54e3044d4453a165e1bdd5984cfa0ceadf4864c224999f66db7_amd64, openshift4/ose-cluster-network-operator@sha256:c70a4c8a29b3d54e3044d4453a165e1bdd5984cfa0ceadf4864c224999f66db7_amd64, openshift4/ose-cluster-network-operator@sha256:c70a4c8a29b3d54e3044d4453a165e1bdd5984cfa0ceadf4864c224999f66db7_amd64
Red Hatopenshift4/ose-image-customization-controller-rhel8@sha256:1cfec904c94893f1cf21cfebb332c5ca928da163d2b85cade378dba9e5deef6e_arm64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-image-customization-controller-rhel8@sha256:1cfec904c94893f1cf21cfebb332c5ca928da163d2b85cade378dba9e5deef6e_arm64, *, *
Red Hatopenshift4/ose-operator-lifecycle-manager@sha256:45d98b7167ab36b15051f1b1130dbc7abb557b49715db9d5d38f854b8df402cf_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-operator-lifecycle-manager@sha256:45d98b7167ab36b15051f1b1130dbc7abb557b49715db9d5d38f854b8df402cf_s390x, *, openshift4/ose-operator-lifecycle-manager@sha256:45d98b7167ab36b15051f1b1130dbc7abb557b49715db9d5d38f854b8df402cf_s390x
Red Hatopenshift4/ose-sdn-rhel8@sha256:3ed9b31220da7d1eebe864915d623670e23b6e842662f501037b2a992747f3c6_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-sdn-rhel8@sha256:3ed9b31220da7d1eebe864915d623670e23b6e842662f501037b2a992747f3c6_s390x, openshift4/ose-sdn-rhel8@sha256:3ed9b31220da7d1eebe864915d623670e23b6e842662f501037b2a992747f3c6_s390x, *
Red Hatopenshift4/ose-multus-cni@sha256:5c001a354831172b22393264c90380247bda648099bfc26f6244d2e273564bcc_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-multus-cni@sha256:5c001a354831172b22393264c90380247bda648099bfc26f6244d2e273564bcc_amd64, openshift4/ose-multus-cni@sha256:5c001a354831172b22393264c90380247bda648099bfc26f6244d2e273564bcc_amd64, openshift4/ose-multus-cni@sha256:5c001a354831172b22393264c90380247bda648099bfc26f6244d2e273564bcc_amd64
Red Hatopenshift4/ose-haproxy-router@sha256:378da9a5fdc1ce7d9207f0e9711e3935b353a3ede2c932d64e88fa6fa7d79f0d_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-haproxy-router@sha256:378da9a5fdc1ce7d9207f0e9711e3935b353a3ede2c932d64e88fa6fa7d79f0d_s390x, openshift4/ose-haproxy-router@sha256:378da9a5fdc1ce7d9207f0e9711e3935b353a3ede2c932d64e88fa6fa7d79f0d_s390x, openshift4/ose-haproxy-router@sha256:378da9a5fdc1ce7d9207f0e9711e3935b353a3ede2c932d64e88fa6fa7d79f0d_s390x
Red Hatopenshift4/ose-docker-registry@sha256:8904fed95ea7ae8ca2e0e020855774a88fb8277d8809dd8f9143cc8a680de1dc_arm64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-docker-registry@sha256:8904fed95ea7ae8ca2e0e020855774a88fb8277d8809dd8f9143cc8a680de1dc_arm64, *, openshift4/ose-docker-registry@sha256:8904fed95ea7ae8ca2e0e020855774a88fb8277d8809dd8f9143cc8a680de1dc_arm64
Red Hatopenshift4/ose-tests@sha256:e75f97d3715d60c81ff8cdecbac7df2201a14023bd6c7e4ed1b68e545e0615ba_amd64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-tests@sha256:e75f97d3715d60c81ff8cdecbac7df2201a14023bd6c7e4ed1b68e545e0615ba_amd64, openshift4/ose-tests@sha256:e75f97d3715d60c81ff8cdecbac7df2201a14023bd6c7e4ed1b68e545e0615ba_amd64, *
Red Hatopenshift4/ose-docker-registry@sha256:8904fed95ea7ae8ca2e0e020855774a88fb8277d8809dd8f9143cc8a680de1dc_arm64 as a component of Red Hat OpenShift Container Platform 4.12*, openshift4/ose-docker-registry@sha256:8904fed95ea7ae8ca2e0e020855774a88fb8277d8809dd8f9143cc8a680de1dc_arm64, openshift4/ose-docker-registry@sha256:8904fed95ea7ae8ca2e0e020855774a88fb8277d8809dd8f9143cc8a680de1dc_arm64
Red Hatopenshift4/ose-baremetal-rhel8-operator@sha256:83b01ed020dc993861a93ee2bcf1c1ccdb7c5f92cd7d732918a7d77efbcdc5d4_s390x as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-baremetal-rhel8-operator@sha256:83b01ed020dc993861a93ee2bcf1c1ccdb7c5f92cd7d732918a7d77efbcdc5d4_s390x, *, openshift4/ose-baremetal-rhel8-operator@sha256:83b01ed020dc993861a93ee2bcf1c1ccdb7c5f92cd7d732918a7d77efbcdc5d4_s390x
Red Hatopenshift4/ose-tests@sha256:3f7074a7d28d968e325f064aa40164a9bf04812708323bd10406ad446921ac43_arm64 as a component of Red Hat OpenShift Container Platform 4.12openshift4/ose-tests@sha256:3f7074a7d28d968e325f064aa40164a9bf04812708323bd10406ad446921ac43_arm64, openshift4/ose-tests@sha256:3f7074a7d28d968e325f064aa40164a9bf04812708323bd10406ad446921ac43_arm64, openshift4/ose-tests@sha256:3f7074a7d28d968e325f064aa40164a9bf04812708323bd10406ad446921ac43_arm64

…and 212 more

Timeline

  • Mar 27, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Jun 23, 2026 CVE Updated

References

…and 17 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›