RHSA-2023%3A3905 — Vulnetix

RHSA-2023%3A3905 PUBLISHED CVSS 7.300000190734863 HIGH

A flaw was found in golang where angle brackets (<>) were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if executed with untrusted input.

Risk Scores

CVSS 3.1

7.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Products

…and 20 more

Timeline

Jun 28, 2023 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 29, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2023:3905 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2196026 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2196027 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2196029 issue
https://issues.redhat.com/browse/NETOBSERV-1003 advisory
https://issues.redhat.com/browse/NETOBSERV-1070 advisory
https://issues.redhat.com/browse/NETOBSERV-166 advisory
https://issues.redhat.com/browse/NETOBSERV-391 advisory
https://issues.redhat.com/browse/NETOBSERV-576 advisory
https://issues.redhat.com/browse/NETOBSERV-765 advisory
https://issues.redhat.com/browse/NETOBSERV-773 advisory
https://issues.redhat.com/browse/NETOBSERV-776 advisory
https://issues.redhat.com/browse/NETOBSERV-901 advisory
https://issues.redhat.com/browse/NETOBSERV-934 advisory
https://issues.redhat.com/browse/NETOBSERV-971 advisory
https://issues.redhat.com/browse/NETOBSERV-972 advisory
https://issues.redhat.com/browse/NETOBSERV-976 advisory
https://issues.redhat.com/browse/NETOBSERV-981 advisory
https://issues.redhat.com/browse/NETOBSERV-984 advisory

…and 14 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	network-observability/network-observability-rhel9-operator@sha256:414cd50dc5e204226eb32b21da876aad3edba2c7b5a8a935e8e275773e63d56a_ppc64le as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:414cd50dc5e204226eb32b21da876aad3edba2c7b5a8a935e8e275773e63d56a_ppc64le
Red Hat	network-observability/network-observability-operator-bundle@sha256:80788b01b0a853ca8dde3b7351f5af8b7622453616f2ee4a4cb064f65bebaa60_ppc64le as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:80788b01b0a853ca8dde3b7351f5af8b7622453616f2ee4a4cb064f65bebaa60_ppc64le, network-observability/network-observability-operator-bundle@sha256:80788b01b0a853ca8dde3b7351f5af8b7622453616f2ee4a4cb064f65bebaa60_ppc64le
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:23e28210806e49df576c16d1e599e8a0ed5dea19154f1c5baf9add9fa2d2833c_arm64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:23e28210806e49df576c16d1e599e8a0ed5dea19154f1c5baf9add9fa2d2833c_arm64
Red Hat	network-observability/network-observability-operator-bundle@sha256:22a408f5b24c1ca916a80f15cfe3cb9059a3dc5677d297c7386c00cb751be487_arm64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:22a408f5b24c1ca916a80f15cfe3cb9059a3dc5677d297c7386c00cb751be487_arm64
Red Hat	network-observability/network-observability-rhel9-operator@sha256:38b57c0ea502708bdc49fb47fb9c50bbc93ddb22b941160e4a1cac0f2afc6856_amd64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:38b57c0ea502708bdc49fb47fb9c50bbc93ddb22b941160e4a1cac0f2afc6856_amd64
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:bacfb687cad8a421e7d1c6743c16ce1296af9bee1a845d7cf337deba3df809da_amd64 as a component of NETOBSERV 1.3 for RHEL 9	,
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:589f15ee6f2d80e7d4e9e28fc63ca7e5d56f5a388634ce276dc57f4e27a0a89b_ppc64le as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:589f15ee6f2d80e7d4e9e28fc63ca7e5d56f5a388634ce276dc57f4e27a0a89b_ppc64le, *
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:47801e613c40d0a07f22d3aea6f95708f512acbf09e4c30b683dba7dfea53e9f_arm64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:47801e613c40d0a07f22d3aea6f95708f512acbf09e4c30b683dba7dfea53e9f_arm64
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:da2ef6762243a73fbb67cf3b5d70194e69c1d10bcac02e59caedea03061e4577_s390x as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-console-plugin-rhel9@sha256:da2ef6762243a73fbb67cf3b5d70194e69c1d10bcac02e59caedea03061e4577_s390x
Red Hat	network-observability/network-observability-operator-bundle@sha256:b03f4e88ab1fed4744356a584d673fb2fdb15de7e1de7786bdd222b853690670_amd64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:b03f4e88ab1fed4744356a584d673fb2fdb15de7e1de7786bdd222b853690670_amd64
Red Hat	network-observability/network-observability-operator-bundle@sha256:80788b01b0a853ca8dde3b7351f5af8b7622453616f2ee4a4cb064f65bebaa60_ppc64le as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:80788b01b0a853ca8dde3b7351f5af8b7622453616f2ee4a4cb064f65bebaa60_ppc64le
Red Hat	network-observability/network-observability-operator-bundle@sha256:22a408f5b24c1ca916a80f15cfe3cb9059a3dc5677d297c7386c00cb751be487_arm64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:22a408f5b24c1ca916a80f15cfe3cb9059a3dc5677d297c7386c00cb751be487_arm64, network-observability/network-observability-operator-bundle@sha256:22a408f5b24c1ca916a80f15cfe3cb9059a3dc5677d297c7386c00cb751be487_arm64
Red Hat	network-observability/network-observability-rhel9-operator@sha256:a06a3a4a5604d0e2bad7eaa63b98a12acc86ddbb2e9cbf3470fd5157a02f7bf1_arm64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:a06a3a4a5604d0e2bad7eaa63b98a12acc86ddbb2e9cbf3470fd5157a02f7bf1_arm64, *
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:f3ecfcc041d2c01287f437125df492a7781f9094850513170ebcd54c94737103_arm64 as a component of NETOBSERV 1.3 for RHEL 9	*, network-observability/network-observability-console-plugin-rhel9@sha256:f3ecfcc041d2c01287f437125df492a7781f9094850513170ebcd54c94737103_arm64
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:c45986d378f644b5824b03c29ce6033de81219603446121fee0833e5158a702e_ppc64le as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:c45986d378f644b5824b03c29ce6033de81219603446121fee0833e5158a702e_ppc64le
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:d40cf50e30d0f475dad272520f332ee437b35b6ca4b786513e73a930e3a88eab_amd64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:d40cf50e30d0f475dad272520f332ee437b35b6ca4b786513e73a930e3a88eab_amd64, *
Red Hat	network-observability/network-observability-rhel9-operator@sha256:a06a3a4a5604d0e2bad7eaa63b98a12acc86ddbb2e9cbf3470fd5157a02f7bf1_arm64 as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:a06a3a4a5604d0e2bad7eaa63b98a12acc86ddbb2e9cbf3470fd5157a02f7bf1_arm64
Red Hat	network-observability/network-observability-operator-bundle@sha256:5dbc838683ee0b38a6aa6829ef98d64dcff1be89f58ac2a57ed5dce03ed3713b_s390x as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:5dbc838683ee0b38a6aa6829ef98d64dcff1be89f58ac2a57ed5dce03ed3713b_s390x
Red Hat	network-observability/network-observability-operator-bundle@sha256:b03f4e88ab1fed4744356a584d673fb2fdb15de7e1de7786bdd222b853690670_amd64 as a component of NETOBSERV 1.3 for RHEL 9	,
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:589f15ee6f2d80e7d4e9e28fc63ca7e5d56f5a388634ce276dc57f4e27a0a89b_ppc64le as a component of NETOBSERV 1.3 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:589f15ee6f2d80e7d4e9e28fc63ca7e5d56f5a388634ce276dc57f4e27a0a89b_ppc64le