VDB
RHSA-2023%3A5888
RHSA-2023%3A5888
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in the Golang HTML package where it is vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's web browser within the security context of the hosting website once the URL is clicked. The flaw allows an attacker to steal the victim's cookie-based authentication credentials.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:334b844c142b61e06d356b7a125a05a1d8f073fbe770c9004bcf96405e5d193d_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-log-reader-rhel8@sha256:334b844c142b61e06d356b7a125a05a1d8f073fbe770c9004bcf96405e5d193d_amd64, rhmtc/openshift-migration-log-reader-rhel8@sha256:334b844c142b61e06d356b7a125a05a1d8f073fbe770c9004bcf96405e5d193d_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:1992066ddf0242e0cd593768b67e55a62ede14f08cef4c9f6336f4e6517d6253_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:1992066ddf0242e0cd593768b67e55a62ede14f08cef4c9f6336f4e6517d6253_amd64 |
| Red Hat | rhmtc/openshift-velero-plugin-rhel8@sha256:9ef01ccf375dd3809160d043346da8a9e5fcf0d19e24f5916e32a2947747ea1d_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-velero-plugin-rhel8@sha256:9ef01ccf375dd3809160d043346da8a9e5fcf0d19e24f5916e32a2947747ea1d_amd64 |
| Red Hat | rhmtc/openshift-migration-must-gather-rhel8@sha256:7bd845a381fca5458440bdb63730bd8bbc62a5787a36321ecdb0f05e1b84559c_amd64 as a component of 8Base-RHMTC-1.7 | * |
| Red Hat | rhmtc/openshift-migration-hook-runner-rhel8@sha256:845ffcdb90d514f47c79e0f4e38e39daf2f1adc7a879245522e0f579cf43cce0_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-hook-runner-rhel8@sha256:845ffcdb90d514f47c79e0f4e38e39daf2f1adc7a879245522e0f579cf43cce0_amd64, rhmtc/openshift-migration-hook-runner-rhel8@sha256:845ffcdb90d514f47c79e0f4e38e39daf2f1adc7a879245522e0f579cf43cce0_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:1992066ddf0242e0cd593768b67e55a62ede14f08cef4c9f6336f4e6517d6253_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:1992066ddf0242e0cd593768b67e55a62ede14f08cef4c9f6336f4e6517d6253_amd64, rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:1992066ddf0242e0cd593768b67e55a62ede14f08cef4c9f6336f4e6517d6253_amd64 |
| Red Hat | rhmtc/openshift-migration-log-reader-rhel8@sha256:334b844c142b61e06d356b7a125a05a1d8f073fbe770c9004bcf96405e5d193d_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-log-reader-rhel8@sha256:334b844c142b61e06d356b7a125a05a1d8f073fbe770c9004bcf96405e5d193d_amd64 |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:a571707cd4d1123125d96af3f3c8b1af711aa7868a694d220804c244ca4d1e46_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-registry-rhel8@sha256:a571707cd4d1123125d96af3f3c8b1af711aa7868a694d220804c244ca4d1e46_amd64, rhmtc/openshift-migration-registry-rhel8@sha256:a571707cd4d1123125d96af3f3c8b1af711aa7868a694d220804c244ca4d1e46_amd64 |
| Red Hat | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:1581753bd7802d99c0a5c1b31e8deee9cea395f4eefc6077820c850f15fb4ed2_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:1581753bd7802d99c0a5c1b31e8deee9cea395f4eefc6077820c850f15fb4ed2_amd64, rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:1581753bd7802d99c0a5c1b31e8deee9cea395f4eefc6077820c850f15fb4ed2_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:d1f028a03bdeebafe1149b5e91762be0f71dd0d426b759e785857299c56ec5b5_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:d1f028a03bdeebafe1149b5e91762be0f71dd0d426b759e785857299c56ec5b5_amd64 |
| Red Hat | rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:1581753bd7802d99c0a5c1b31e8deee9cea395f4eefc6077820c850f15fb4ed2_amd64 as a component of 8Base-RHMTC-1.7 | * |
| Red Hat | rhmtc/openshift-migration-operator-bundle@sha256:4c8cd36802b1b1b2e1501f47dafe4eecd31becc4cf796c0d4d35f96190ae6e0d_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-operator-bundle@sha256:4c8cd36802b1b1b2e1501f47dafe4eecd31becc4cf796c0d4d35f96190ae6e0d_amd64, rhmtc/openshift-migration-operator-bundle@sha256:4c8cd36802b1b1b2e1501f47dafe4eecd31becc4cf796c0d4d35f96190ae6e0d_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:f8175f7bf1442c2153430e80d835814543262df5f2495641d15004319fe1ee5c_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:f8175f7bf1442c2153430e80d835814543262df5f2495641d15004319fe1ee5c_amd64, rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:f8175f7bf1442c2153430e80d835814543262df5f2495641d15004319fe1ee5c_amd64 |
| Red Hat | rhmtc/openshift-migration-openvpn-rhel8@sha256:bba6a0724f2709deb463b9d72bdef30f1ad5f157868d7c06656dd429416d7bf1_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-openvpn-rhel8@sha256:bba6a0724f2709deb463b9d72bdef30f1ad5f157868d7c06656dd429416d7bf1_amd64 |
| Red Hat | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:daa0f0c23d14b11093e5221cca96076299b77258b02f9351445dd893cadddc4d_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:daa0f0c23d14b11093e5221cca96076299b77258b02f9351445dd893cadddc4d_amd64 |
| Red Hat | rhmtc/openshift-migration-hook-runner-rhel8@sha256:845ffcdb90d514f47c79e0f4e38e39daf2f1adc7a879245522e0f579cf43cce0_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-hook-runner-rhel8@sha256:845ffcdb90d514f47c79e0f4e38e39daf2f1adc7a879245522e0f579cf43cce0_amd64 |
| Red Hat | rhmtc/openshift-migration-rhel8-operator@sha256:4e9cfef9a48d4c08a113d012d1ad0a518ab1868897c80473056a8b7313c06d19_amd64 as a component of 8Base-RHMTC-1.7 | *, rhmtc/openshift-migration-rhel8-operator@sha256:4e9cfef9a48d4c08a113d012d1ad0a518ab1868897c80473056a8b7313c06d19_amd64 |
| Red Hat | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:daa0f0c23d14b11093e5221cca96076299b77258b02f9351445dd893cadddc4d_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-legacy-rhel8-operator@sha256:daa0f0c23d14b11093e5221cca96076299b77258b02f9351445dd893cadddc4d_amd64, rhmtc/openshift-migration-legacy-rhel8-operator@sha256:daa0f0c23d14b11093e5221cca96076299b77258b02f9351445dd893cadddc4d_amd64 |
| Red Hat | rhmtc/openshift-migration-velero-rhel8@sha256:bacd8099ce71c12f75bed705ec9ee48ceaa78076789940849f620419a903ab25_amd64 as a component of 8Base-RHMTC-1.7 | * |
| Red Hat | rhmtc/openshift-migration-registry-rhel8@sha256:a571707cd4d1123125d96af3f3c8b1af711aa7868a694d220804c244ca4d1e46_amd64 as a component of 8Base-RHMTC-1.7 | rhmtc/openshift-migration-registry-rhel8@sha256:a571707cd4d1123125d96af3f3c8b1af711aa7868a694d220804c244ca4d1e46_amd64 |
…and 14 more
Timeline
- Oct 19, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:5888 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2228689 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5888.json advisory
- https://access.redhat.com/security/cve/CVE-2023-3978 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-3978 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-3978 advisory
- https://go.dev/cl/514896 advisory
- https://go.dev/issue/61615 advisory
- https://pkg.go.dev/vuln/GO-2023-1988 advisory