VDB

RHSA-2023%3A3644

RHSA-2023%3A3644 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in golang, where not all valid JavaScript white-space characters were considered white space. Due to this issue, templates containing white-space characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red Hatopenshift-service-mesh/proxyv2-rhel8@sha256:8c78626f5d486a75b2c07e82479d30e294e929c9c04e2db09b413838c1d5b965_s390x as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/proxyv2-rhel8@sha256:8c78626f5d486a75b2c07e82479d30e294e929c9c04e2db09b413838c1d5b965_s390x
Red Hatopenshift-service-mesh/istio-rhel8-operator@sha256:88e72801cc48bf310ca498c1f9c995dacc70b0570d9046627e9e8133d68ba619_amd64 as a component of RHOSSM 2.4 for RHEL 8*
Red Hatopenshift-service-mesh/ratelimit-rhel8@sha256:beb9b3aab05f3ebe80ee1358f8be8dfe55d3e9616cec5ab542e8360bbd61667c_ppc64le as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/ratelimit-rhel8@sha256:beb9b3aab05f3ebe80ee1358f8be8dfe55d3e9616cec5ab542e8360bbd61667c_ppc64le
Red Hatopenshift-service-mesh/kiali-rhel8-operator@sha256:f2df08223aabbbe73f3ad226eacfef342e9cd7dc9d9f76831784837233e9bab3_ppc64le as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/kiali-rhel8-operator@sha256:f2df08223aabbbe73f3ad226eacfef342e9cd7dc9d9f76831784837233e9bab3_ppc64le
Red Hatopenshift-service-mesh/ratelimit-rhel8@sha256:5a17a81c29f147812f1e8c52131828d84e3b404223f4099c2dfa7323d3345586_s390x as a component of RHOSSM 2.4 for RHEL 8*
Red Hatopenshift-service-mesh/istio-must-gather-rhel8@sha256:e79559de1bb9c1ca62b2b913598716094c51c859a594754688f566332d018280_s390x as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/istio-must-gather-rhel8@sha256:e79559de1bb9c1ca62b2b913598716094c51c859a594754688f566332d018280_s390x
Red Hatopenshift-service-mesh/pilot-rhel8@sha256:a362627eabd321590db36618cf3de49beab01a90144833844f89d1da913cb1bc_ppc64le as a component of RHOSSM 2.4 for RHEL 8*
Red Hatopenshift-service-mesh/istio-must-gather-rhel8@sha256:8571b1b158048380e4133c1d89a7770990a73b6a4c778a04f20e66c047c4c993_amd64 as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/istio-must-gather-rhel8@sha256:8571b1b158048380e4133c1d89a7770990a73b6a4c778a04f20e66c047c4c993_amd64
Red Hatopenshift-service-mesh/istio-cni-rhel8@sha256:4b5bb6078895f25ac0fe1f095a6b474b81c45fd11b1aec33cc7b6f3921517829_amd64 as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/istio-cni-rhel8@sha256:4b5bb6078895f25ac0fe1f095a6b474b81c45fd11b1aec33cc7b6f3921517829_amd64
Red Hatopenshift-service-mesh/grafana-rhel8@sha256:fad8eeaa0dd5268c260d11582682bb7ec436488f5e35caae3a825b84ee3b1b35_ppc64le as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/grafana-rhel8@sha256:fad8eeaa0dd5268c260d11582682bb7ec436488f5e35caae3a825b84ee3b1b35_ppc64le
Red Hatopenshift-service-mesh/proxyv2-rhel8@sha256:f3f17317795e4526ec3478be6ada6e099b9886fa354dc9c917abff52063f1f9e_amd64 as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/proxyv2-rhel8@sha256:f3f17317795e4526ec3478be6ada6e099b9886fa354dc9c917abff52063f1f9e_amd64
Red Hatopenshift-service-mesh/kiali-rhel8@sha256:61404d6af307383070c63d73a55500f9b13ebe9eb0cf37128db5d565fc13cd9e_s390x as a component of RHOSSM 2.4 for RHEL 8*
Red Hatopenshift-service-mesh/grafana-rhel8@sha256:f4abc32571c1d18f5af3d08ad7fc0cb7d31a90af31273477e0158629dcb0c390_s390x as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/grafana-rhel8@sha256:f4abc32571c1d18f5af3d08ad7fc0cb7d31a90af31273477e0158629dcb0c390_s390x
Red Hatopenshift-service-mesh/istio-rhel8-operator@sha256:4a9dc1d3e45460d3bc699932f5b9345c81d4c5740c7cacdf550691f7e02d743b_ppc64le as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/istio-rhel8-operator@sha256:4a9dc1d3e45460d3bc699932f5b9345c81d4c5740c7cacdf550691f7e02d743b_ppc64le
Red Hatopenshift-service-mesh/ratelimit-rhel8@sha256:3caa8b6f3f940c7cd4ba2fb21522572dec2c7d6ae2ea31f2a377c4dfeea0b981_amd64 as a component of RHOSSM 2.4 for RHEL 8*
Red Hatopenshift-service-mesh/istio-rhel8-operator@sha256:ea48a2037f74ad55c2595dbec3e44ed4a764ccd1d5021c6b3ed8a5a579167f18_s390x as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/istio-rhel8-operator@sha256:ea48a2037f74ad55c2595dbec3e44ed4a764ccd1d5021c6b3ed8a5a579167f18_s390x
Red Hatopenshift-service-mesh/grafana-rhel8@sha256:f4abc32571c1d18f5af3d08ad7fc0cb7d31a90af31273477e0158629dcb0c390_s390x as a component of RHOSSM 2.4 for RHEL 8*
Red Hatopenshift-service-mesh/istio-rhel8-operator@sha256:88e72801cc48bf310ca498c1f9c995dacc70b0570d9046627e9e8133d68ba619_amd64 as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/istio-rhel8-operator@sha256:88e72801cc48bf310ca498c1f9c995dacc70b0570d9046627e9e8133d68ba619_amd64
Red Hatopenshift-service-mesh/kiali-rhel8@sha256:61404d6af307383070c63d73a55500f9b13ebe9eb0cf37128db5d565fc13cd9e_s390x as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/kiali-rhel8@sha256:61404d6af307383070c63d73a55500f9b13ebe9eb0cf37128db5d565fc13cd9e_s390x
Red Hatopenshift-service-mesh/istio-must-gather-rhel8@sha256:e79559de1bb9c1ca62b2b913598716094c51c859a594754688f566332d018280_s390x as a component of RHOSSM 2.4 for RHEL 8openshift-service-mesh/istio-must-gather-rhel8@sha256:e79559de1bb9c1ca62b2b913598716094c51c859a594754688f566332d018280_s390x

…and 34 more

Timeline

  • Jun 15, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 29, 2026 CVE Updated

References

…and 16 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›