VDB
RHSA-2023%3A1525
RHSA-2023%3A1525
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in Mongo. Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshaling Go objects into BSON. This flaw allows a malicious user to use a Go object with a specific string to inject additional fields into marshaled documents.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ovirt-csi-driver-rhel8@sha256:25cbaf2f2328996a2e25b14d7c385397bfcc33e4eea1dc4dd591d9db839e7300_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | *, *, * |
| Red Hat | openshift4/ose-tests@sha256:5d6af8e7f0a7a356b3e6850d526a8312488544e89a9f737f7d3e86bdc753ac69_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-tests@sha256:5d6af8e7f0a7a356b3e6850d526a8312488544e89a9f737f7d3e86bdc753ac69_arm64, *, openshift4/ose-tests@sha256:5d6af8e7f0a7a356b3e6850d526a8312488544e89a9f737f7d3e86bdc753ac69_arm64 |
| MongoDB | mongo-go-driver | |
| Red Hat | openshift4/ose-csi-snapshot-controller-rhel8@sha256:ee300c403deb2602189c5ddfaafbeeecb82b0f097b905577f0e185f576bc142e_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-csi-snapshot-controller-rhel8@sha256:ee300c403deb2602189c5ddfaafbeeecb82b0f097b905577f0e185f576bc142e_amd64, *, * |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:159179e2f8bc5e466a21ce4573c998dcf2b48676cf2a067739cd8436ac88b18e_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cluster-node-tuning-operator@sha256:159179e2f8bc5e466a21ce4573c998dcf2b48676cf2a067739cd8436ac88b18e_amd64, openshift4/ose-cluster-node-tuning-operator@sha256:159179e2f8bc5e466a21ce4573c998dcf2b48676cf2a067739cd8436ac88b18e_amd64, openshift4/ose-cluster-node-tuning-operator@sha256:159179e2f8bc5e466a21ce4573c998dcf2b48676cf2a067739cd8436ac88b18e_amd64 |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:67f88ebc8f2e8f32bb82665c25157b98fa2178dada5e0532cecd133e44ee608a_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-prometheus-node-exporter@sha256:67f88ebc8f2e8f32bb82665c25157b98fa2178dada5e0532cecd133e44ee608a_arm64, *, * |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:0bcd3cdd8b2fd0a47ac3f34b66351b50cd4f29766b6c7498ca22e049e69377d2_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cloud-credential-operator@sha256:0bcd3cdd8b2fd0a47ac3f34b66351b50cd4f29766b6c7498ca22e049e69377d2_arm64, openshift4/ose-cloud-credential-operator@sha256:0bcd3cdd8b2fd0a47ac3f34b66351b50cd4f29766b6c7498ca22e049e69377d2_arm64, openshift4/ose-cloud-credential-operator@sha256:0bcd3cdd8b2fd0a47ac3f34b66351b50cd4f29766b6c7498ca22e049e69377d2_arm64 |
| Red Hat | openshift4/ose-cluster-authentication-operator@sha256:5d3da65d6e49da071133de3ab04b5a9fbd16d75bf3893d1f2326ffe68b6618ca_ppc64le as a component of Red Hat OpenShift Container Platform 4.9 | *, *, openshift4/ose-cluster-authentication-operator@sha256:5d3da65d6e49da071133de3ab04b5a9fbd16d75bf3893d1f2326ffe68b6618ca_ppc64le |
| Red Hat | openshift4/ose-cli@sha256:fd848e078c8e4a7fff4be28a19aa35586832dddd69ff4433cf869e0dbe982be2_ppc64le as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cli@sha256:fd848e078c8e4a7fff4be28a19aa35586832dddd69ff4433cf869e0dbe982be2_ppc64le, openshift4/ose-cli@sha256:fd848e078c8e4a7fff4be28a19aa35586832dddd69ff4433cf869e0dbe982be2_ppc64le, * |
| Red Hat | openshift4/ose-multus-admission-controller@sha256:07563270f693dbd2caababfb3096e113293d6d4b6c7ef536c4542153d6f98a75_ppc64le as a component of Red Hat OpenShift Container Platform 4.9 | *, *, * |
| Red Hat | openshift4/ose-cli@sha256:fd848e078c8e4a7fff4be28a19aa35586832dddd69ff4433cf869e0dbe982be2_ppc64le as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cli@sha256:fd848e078c8e4a7fff4be28a19aa35586832dddd69ff4433cf869e0dbe982be2_ppc64le, *, openshift4/ose-cli@sha256:fd848e078c8e4a7fff4be28a19aa35586832dddd69ff4433cf869e0dbe982be2_ppc64le |
| Red Hat | openshift4/ose-container-networking-plugins-rhel8@sha256:e0c5e6810d5df9d57036196ff5a1015f1d514057c8daedbad880e614049c6ab1_s390x as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-container-networking-plugins-rhel8@sha256:e0c5e6810d5df9d57036196ff5a1015f1d514057c8daedbad880e614049c6ab1_s390x, openshift4/ose-container-networking-plugins-rhel8@sha256:e0c5e6810d5df9d57036196ff5a1015f1d514057c8daedbad880e614049c6ab1_s390x, openshift4/ose-container-networking-plugins-rhel8@sha256:e0c5e6810d5df9d57036196ff5a1015f1d514057c8daedbad880e614049c6ab1_s390x |
| Red Hat | openshift4/ose-hyperkube@sha256:54504cce6c3919034493d2639555769cbd5146baebe5314e561b5aa195dda171_ppc64le as a component of Red Hat OpenShift Container Platform 4.9 | *, *, * |
| Red Hat | openshift4/ose-cluster-ingress-operator@sha256:510c4e706847bcb25dbbbb0aec9ab7113d7d485285599c2aa3f376740067cbaf_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | *, *, * |
| Red Hat | openshift4/ose-cluster-bootstrap@sha256:24acb2db0046d54bca5eebf4a2d635fdcd9cc2ea9f5f559803ba52938957a104_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cluster-bootstrap@sha256:24acb2db0046d54bca5eebf4a2d635fdcd9cc2ea9f5f559803ba52938957a104_amd64, *, openshift4/ose-cluster-bootstrap@sha256:24acb2db0046d54bca5eebf4a2d635fdcd9cc2ea9f5f559803ba52938957a104_amd64 |
| Red Hat | openshift4/ose-docker-registry@sha256:617b1ae4d98d9df9a3587f312e6d591120a02678b479af7b9c2d84f575b73a58_s390x as a component of Red Hat OpenShift Container Platform 4.9 | *, *, openshift4/ose-docker-registry@sha256:617b1ae4d98d9df9a3587f312e6d591120a02678b479af7b9c2d84f575b73a58_s390x |
| Red Hat | openshift4/ose-openstack-machine-controllers@sha256:18577224d6a4195066feaaa82186533a4f5be3b6dc4ba81164ab1e0cbd641d63_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | *, openshift4/ose-openstack-machine-controllers@sha256:18577224d6a4195066feaaa82186533a4f5be3b6dc4ba81164ab1e0cbd641d63_amd64, * |
| Red Hat | openshift4/ose-oauth-server-rhel8@sha256:68a3ee5a91e52a36b7e246672017fd7602af71bb283928daf49724751aebeba6_s390x as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-oauth-server-rhel8@sha256:68a3ee5a91e52a36b7e246672017fd7602af71bb283928daf49724751aebeba6_s390x, *, openshift4/ose-oauth-server-rhel8@sha256:68a3ee5a91e52a36b7e246672017fd7602af71bb283928daf49724751aebeba6_s390x |
| Red Hat | openshift4/ose-baremetal-machine-controllers@sha256:d573214f98b398cfccc68dcab7d68c096d00c86d48be191dcc30434626f5f246_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | *, *, openshift4/ose-baremetal-machine-controllers@sha256:d573214f98b398cfccc68dcab7d68c096d00c86d48be191dcc30434626f5f246_arm64 |
| Red Hat | openshift4/ose-thanos-rhel8@sha256:1214c3fb8dea700ee0325f21b53c179e7ed54c8aa596aa84276bdb85e2a1cf2d_s390x as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-thanos-rhel8@sha256:1214c3fb8dea700ee0325f21b53c179e7ed54c8aa596aa84276bdb85e2a1cf2d_s390x, openshift4/ose-thanos-rhel8@sha256:1214c3fb8dea700ee0325f21b53c179e7ed54c8aa596aa84276bdb85e2a1cf2d_s390x, * |
…and 1055 more
Timeline
- Apr 5, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jul 25, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:1525 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1971033 issue
- https://issues.redhat.com/browse/OCPBUGS-7081 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1525.json advisory
- https://access.redhat.com/security/cve/CVE-2021-20329 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-20329 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-20329 advisory
- https://github.com/advisories/GHSA-f6mq-5m25-4r72 advisory
- https://github.com/mongodb/mongo-go-driver/releases/tag/v1.5.1 advisory