RHSA-2023%3A3435 — Vulnetix

RHSA-2023%3A3435 PUBLISHED CVSS 7.300000190734863 HIGH

A flaw was found in golang where angle brackets (<>) were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if executed with untrusted input.

Risk Scores

CVSS 3.1

7.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products

…and 46 more

Timeline

Jun 5, 2023 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 29, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2023:3435 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://docs.openshift.com/acs/3.74/release_notes/374-release-notes.html advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2196026 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2196027 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2196029 issue
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3435.json advisory
https://access.redhat.com/security/cve/CVE-2023-24539 advisory
https://www.cve.org/CVERecord?id=CVE-2023-24539 advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-24539 advisory
https://github.com/golang/go/issues/59720 advisory
https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU advisory
https://access.redhat.com/security/cve/CVE-2023-24540 advisory
https://www.cve.org/CVERecord?id=CVE-2023-24540 advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-24540 advisory
https://go.dev/issue/59721 advisory
https://access.redhat.com/security/cve/CVE-2023-29400 advisory
https://www.cve.org/CVERecord?id=CVE-2023-29400 advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-29400 advisory
https://go.dev/issue/59722 advisory

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64 as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-main-rhel8@sha256:37a457dc9ec3b6289092bb50aee9012e39635f181f69247daffb6b43f74e36d3_amd64
Red Hat	advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x
Red Hat	advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le as a component of RHACS 3.74 for RHEL 8	*, advanced-cluster-security/rhacs-collector-rhel8@sha256:b496c3acb360ccf5e06a8772b2513b7c206eae53bea77ee1bbbfa7e5672a96e6_ppc64le
Red Hat	advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:b20c023df6db122db607bc2d92694c22a4f1d9a8e0ca1a72d4adeec086ab5b94_ppc64le
Red Hat	advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:1bb1e02d6c11fd13a10731c2a22d171315f145d7f94f794b1bfe0f7bc83ec276_s390x
Red Hat	advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x, advanced-cluster-security/rhacs-scanner-rhel8@sha256:10e30c1ae5a0f56c836f03d21d9025bfdb79db9a44636d294c72cff2b58c96a6_s390x
Red Hat	advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-main-rhel8@sha256:dd37b25843db628d6034e829e25af295d4e68dc4ae39e9f6a1120572144781f3_ppc64le
Red Hat	advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x, advanced-cluster-security/rhacs-main-rhel8@sha256:4ba9b7c96758b66e86c6195bf3da27a3abf16937921e6a6068642ae8cfc34b0e_s390x
Red Hat	advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-roxctl-rhel8@sha256:aaf0ce7b0a9efde2caf77cb807bac644a2eb2dee1874467a708eeae42a88e7ca_s390x, *
Red Hat	advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e7ab820108c23bee9c85839c651776e362d1aca05a41ce4b180ca05ae6544ce8_ppc64le
Red Hat	advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64 as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64, advanced-cluster-security/rhacs-collector-rhel8@sha256:793053fe5bb210e362b0c5006028348decee4219561138a02ca7b3013ecb46b0_amd64
Red Hat	advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le as a component of RHACS 3.74 for RHEL 8	*, advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le
Red Hat	advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64 as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-rhel8-operator@sha256:7c84102c2124b70789c2b2e26f4a52d23598ec8b6557534036035055770d4051_amd64
Red Hat	advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-rhel8-operator@sha256:58a2803b918cd6eb542973729428557b3dfa4e00e098c1732cba238862324edc_ppc64le
Red Hat	advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64 as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-scanner-rhel8@sha256:b887dfc9f1ad24d77250c67cc18e1eaea51b51afe0c641af04d9e884dedc442b_amd64
Red Hat	advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le as a component of RHACS 3.74 for RHEL 8	*, advanced-cluster-security/rhacs-roxctl-rhel8@sha256:6a9753d5ab4218adbeade340597c15ca76f975aa88fa1a004a027885b28d5c2c_ppc64le
Red Hat	advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x, advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:5bec876ca801db3fc1976eec48cae2399eb95e1731476bfc5fc46414ff8d26e7_s390x
Red Hat	advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-central-db-rhel8@sha256:ccf3820919ce24a8f3e4be3c9089ed16ba3d2a90f5a95316ea852f1095cf49b6_s390x
Red Hat	advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le as a component of RHACS 3.74 for RHEL 8	advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le, advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:65bd7e1fdfe01b4fec40204a06a71ff37edac86308354161fc78e99899026c1d_ppc64le
Red Hat	advanced-cluster-security/rhacs-rhel8-operator@sha256:11984f5258a5fdda664b6bf348944dfee541462ec28963763574d3b2edc5cb40_s390x as a component of RHACS 3.74 for RHEL 8	,