VDB
RHSA-2023%3A3410
RHSA-2023%3A3410
PUBLISHED
CVSS 8.100000381469727 HIGH
A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
Risk Scores
CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ovirt-csi-driver-rhel7@sha256:7cc4d7fe57d655a8091319b90a2dd7d0a3e52aeb6f224234a57055809e431c11_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ovirt-csi-driver-rhel7@sha256:7cc4d7fe57d655a8091319b90a2dd7d0a3e52aeb6f224234a57055809e431c11_arm64 |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:b623fac6e8503e0464ac3e62cc8e6776342011af80f638e45202c51b479410ef_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:b623fac6e8503e0464ac3e62cc8e6776342011af80f638e45202c51b479410ef_s390x |
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel8@sha256:05a33da7d5952c6085c8721abc8a36b3dacbe37c2bc68a231306515aa06e3335_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-cluster-api-rhel8@sha256:1a82ebc4ef43e2bf4c7aa431686ed88e98ce0717b0cfb162560dca4f2e14a679_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-api-rhel8@sha256:1a82ebc4ef43e2bf4c7aa431686ed88e98ce0717b0cfb162560dca4f2e14a679_arm64 |
| Red Hat | openshift4/ose-kube-state-metrics@sha256:ea6a78590e4ec08d0bf8a78b97987bdaa4eb8c47a28ad1cbed99545890340daf_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-kube-state-metrics@sha256:ea6a78590e4ec08d0bf8a78b97987bdaa4eb8c47a28ad1cbed99545890340daf_amd64 |
| Red Hat | openshift4/ose-operator-registry@sha256:90a2556aaad6ba391fe82fd4ef296951b354065552072ffd5f729426584d9033_s390x as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel8@sha256:f46f9ff8e2d3ec01f386f8105531f29348ba2a20ae79b4f338edb683d9902943_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-csi-external-snapshotter-rhel8@sha256:f46f9ff8e2d3ec01f386f8105531f29348ba2a20ae79b4f338edb683d9902943_arm64 |
| Red Hat | openshift4/ose-multus-admission-controller@sha256:04a4d360e2faa64361fcc3f4796945b9367d33aeed70bb6bf87b99a177c79971_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-multus-admission-controller@sha256:04a4d360e2faa64361fcc3f4796945b9367d33aeed70bb6bf87b99a177c79971_arm64 |
| Red Hat | openshift4/ose-openstack-machine-controllers@sha256:324ef2c4555cf61da93467738947a969ba5d42367151fe12000024fb3ccec70d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/cloud-network-config-controller-rhel8@sha256:c3c809120d02974266878bf46b74b1741b0d58eb20b3dc6c07d3cb16d3c45da7_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:2d555f88d7805597ef746a4802968cce345077043a1f71664811c0ddb265e119_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-gcp-cloud-controller-manager-rhel8@sha256:2d555f88d7805597ef746a4802968cce345077043a1f71664811c0ddb265e119_ppc64le |
| Red Hat | openshift4/ose-gcp-pd-csi-driver-rhel8@sha256:3a80f95b77de9aab6c8a3a812ab668fe6a16712bbeacad859ac4d268ba02a2f9_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-gcp-pd-csi-driver-rhel8@sha256:3a80f95b77de9aab6c8a3a812ab668fe6a16712bbeacad859ac4d268ba02a2f9_amd64 |
| Red Hat | openshift4/ose-cluster-version-operator@sha256:e8240acb82aedbfb4e69fddfb956cd88e3529e4c377dbd2df3e38616812fc497_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-version-operator@sha256:e8240acb82aedbfb4e69fddfb956cd88e3529e4c377dbd2df3e38616812fc497_arm64 |
| Red Hat | openshift4/ose-libvirt-machine-controllers@sha256:19486a6e114834d9c01e4b18074a3ce5dc3497d6b4ae8a73774496710db17211_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-libvirt-machine-controllers@sha256:19486a6e114834d9c01e4b18074a3ce5dc3497d6b4ae8a73774496710db17211_s390x |
| Red Hat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:9569d0ac31e4c2473f60c6bf642e72abf6bacf6d6a6d90507a68b593ae9e7e4a_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-console-operator@sha256:6e7a279d9fce9b279bfcbc424a58fa6c135888c633e5e6bf8502a1ab40a74a79_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-console-operator@sha256:6e7a279d9fce9b279bfcbc424a58fa6c135888c633e5e6bf8502a1ab40a74a79_s390x |
| Red Hat | openshift4/ose-multus-admission-controller@sha256:873ec2ca92348ce422d5b300b3447697107addba2f2127d04f656fb56123c599_s390x as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-oauth-proxy@sha256:ade726323d801c8f504b1d3aa34b3d38d51c4421043581f42c9689ca113e9a7f_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-oauth-proxy@sha256:ade726323d801c8f504b1d3aa34b3d38d51c4421043581f42c9689ca113e9a7f_s390x |
| Red Hat | openshift4/ose-openshift-controller-manager-rhel8@sha256:e650ff9e579104e724fe5a8a147d62e28956c32c004a066aa94bba0dc6e8f5b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | * |
| Red Hat | openshift4/ose-image-customization-controller-rhel8@sha256:d916cf6b88c0a07580e6c17358519b9593482b8ebe44592de47452a5c19b255d_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-image-customization-controller-rhel8@sha256:d916cf6b88c0a07580e6c17358519b9593482b8ebe44592de47452a5c19b255d_amd64 |
…and 1228 more
Timeline
- Jun 7, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 29, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:3410 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://docs.openshift.com/container-platform/4.12/release_notes/ocp-4-12-release-notes.html advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2196027 issue
- https://issues.redhat.com/browse/OCPBUGS-10812 advisory
- https://issues.redhat.com/browse/OCPBUGS-11989 advisory
- https://issues.redhat.com/browse/OCPBUGS-12202 advisory
- https://issues.redhat.com/browse/OCPBUGS-13173 advisory
- https://issues.redhat.com/browse/OCPBUGS-13335 advisory
- https://issues.redhat.com/browse/OCPBUGS-13432 advisory
- https://issues.redhat.com/browse/OCPBUGS-13647 advisory
- https://issues.redhat.com/browse/OCPBUGS-13721 advisory
- https://issues.redhat.com/browse/OCPBUGS-13819 advisory
- https://issues.redhat.com/browse/OCPBUGS-13862 advisory
- https://issues.redhat.com/browse/OCPBUGS-13889 advisory
- https://issues.redhat.com/browse/OCPBUGS-13943 advisory
- https://issues.redhat.com/browse/OCPBUGS-14014 advisory
- https://issues.redhat.com/browse/OCPBUGS-14120 advisory
- https://issues.redhat.com/browse/OCPBUGS-14152 advisory
- https://issues.redhat.com/browse/OCPBUGS-14236 advisory
…and 9 more