VDB
RHSA-2023%3A6202
RHSA-2023%3A6202
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A flaw was found in Golang. The html/template package did not properly handle HMTL-like "<!--" and "-->" comment tokens, nor hashbang "#!" comment tokens, in <script> contexts. This issue may cause the template parser to improperly interpret the contents of <script> contexts, causing actions to be improperly escaped.
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhacm2/console-rhel8@sha256:3d6c5e521eaf99af4354656e9e99a20702232981a34ea285cd9d78a394a76172_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/console-rhel8@sha256:3d6c5e521eaf99af4354656e9e99a20702232981a34ea285cd9d78a394a76172_ppc64le, rhacm2/console-rhel8@sha256:3d6c5e521eaf99af4354656e9e99a20702232981a34ea285cd9d78a394a76172_ppc64le, * |
| Red Hat | rhacm2/acm-must-gather-rhel8@sha256:f251e9013b44c544d23a2572fcecf9b6494043ddd668c873552b7da7bc2fc922_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/acm-must-gather-rhel8@sha256:f251e9013b44c544d23a2572fcecf9b6494043ddd668c873552b7da7bc2fc922_arm64, rhacm2/acm-must-gather-rhel8@sha256:f251e9013b44c544d23a2572fcecf9b6494043ddd668c873552b7da7bc2fc922_arm64, * |
| Red Hat | rhacm2/prometheus-alertmanager-rhel8@sha256:99f5bbd89e595a682c21d1d43ec05547103efe8444583da114d62ec89ca3c162_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/klusterlet-addon-controller-rhel8@sha256:f8d8a8b8cf13be2b54f69b5689ee8a455986990dd86da7b9c7ee292d437872b8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, rhacm2/klusterlet-addon-controller-rhel8@sha256:f8d8a8b8cf13be2b54f69b5689ee8a455986990dd86da7b9c7ee292d437872b8_amd64, rhacm2/klusterlet-addon-controller-rhel8@sha256:f8d8a8b8cf13be2b54f69b5689ee8a455986990dd86da7b9c7ee292d437872b8_amd64 |
| Red Hat | rhacm2/acm-prometheus-config-reloader-rhel8@sha256:45efadc157d6d364d84ab040cfb327b9ff27aa3f5e3848a3fe19d75aec0b5e45_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, rhacm2/acm-prometheus-config-reloader-rhel8@sha256:45efadc157d6d364d84ab040cfb327b9ff27aa3f5e3848a3fe19d75aec0b5e45_arm64, rhacm2/acm-prometheus-config-reloader-rhel8@sha256:45efadc157d6d364d84ab040cfb327b9ff27aa3f5e3848a3fe19d75aec0b5e45_arm64 |
| Red Hat | rhacm2/multicluster-observability-rhel8-operator@sha256:07bf623b7da6a21239ae701a149dc4818d6442cfc25dcca8c1190aed63582645_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, rhacm2/multicluster-observability-rhel8-operator@sha256:07bf623b7da6a21239ae701a149dc4818d6442cfc25dcca8c1190aed63582645_arm64, rhacm2/multicluster-observability-rhel8-operator@sha256:07bf623b7da6a21239ae701a149dc4818d6442cfc25dcca8c1190aed63582645_arm64 |
| Red Hat | rhacm2/acm-must-gather-rhel8@sha256:a5ce4bb1fbfa9e0ac1e0011d5d6e1fcbdcc716784384d9cb415f91b75c68adfd_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/acm-must-gather-rhel8@sha256:a5ce4bb1fbfa9e0ac1e0011d5d6e1fcbdcc716784384d9cb415f91b75c68adfd_s390x, rhacm2/acm-must-gather-rhel8@sha256:a5ce4bb1fbfa9e0ac1e0011d5d6e1fcbdcc716784384d9cb415f91b75c68adfd_s390x, rhacm2/acm-must-gather-rhel8@sha256:a5ce4bb1fbfa9e0ac1e0011d5d6e1fcbdcc716784384d9cb415f91b75c68adfd_s390x |
| Red Hat | rhacm2/rbac-query-proxy-rhel8@sha256:6e31334cbec6e7976d6feb3ace7eab198dd902b6665de583fb8eb0a212230135_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/rbac-query-proxy-rhel8@sha256:6e31334cbec6e7976d6feb3ace7eab198dd902b6665de583fb8eb0a212230135_s390x, rhacm2/rbac-query-proxy-rhel8@sha256:6e31334cbec6e7976d6feb3ace7eab198dd902b6665de583fb8eb0a212230135_s390x, rhacm2/rbac-query-proxy-rhel8@sha256:6e31334cbec6e7976d6feb3ace7eab198dd902b6665de583fb8eb0a212230135_s390x |
| Red Hat | rhacm2/acm-prometheus-config-reloader-rhel8@sha256:3016d37cf969a94314aaaa295c0b1309f4bbfbc50d7d0789e1b875783e2904e4_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, rhacm2/acm-prometheus-config-reloader-rhel8@sha256:3016d37cf969a94314aaaa295c0b1309f4bbfbc50d7d0789e1b875783e2904e4_amd64, * |
| Red Hat | rhacm2/metrics-collector-rhel8@sha256:cfac691f36d544461f0b9f11df9ad4dcfd680030068bd5fcaa3de00001955e03_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/metrics-collector-rhel8@sha256:cfac691f36d544461f0b9f11df9ad4dcfd680030068bd5fcaa3de00001955e03_s390x, rhacm2/metrics-collector-rhel8@sha256:cfac691f36d544461f0b9f11df9ad4dcfd680030068bd5fcaa3de00001955e03_s390x, rhacm2/metrics-collector-rhel8@sha256:cfac691f36d544461f0b9f11df9ad4dcfd680030068bd5fcaa3de00001955e03_s390x |
| Red Hat | rhacm2/multicloud-integrations-rhel8@sha256:44a5e58ee9ed3e1596b8c5f3f7966afea590cd40889685465b422d01770824b0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, rhacm2/multicloud-integrations-rhel8@sha256:44a5e58ee9ed3e1596b8c5f3f7966afea590cd40889685465b422d01770824b0_ppc64le |
| Red Hat | rhacm2/acm-must-gather-rhel8@sha256:f0a55d80c693cf5a618d809a27e906e258f66bcb7e3d93fe78b542c084bf7624_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/multiclusterhub-rhel8@sha256:a3311e48fbf48dbb7165f44810e526031c24b4b756a6972fc2bbf8d6a8583c44_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/multiclusterhub-rhel8@sha256:a3311e48fbf48dbb7165f44810e526031c24b4b756a6972fc2bbf8d6a8583c44_amd64, rhacm2/multiclusterhub-rhel8@sha256:a3311e48fbf48dbb7165f44810e526031c24b4b756a6972fc2bbf8d6a8583c44_amd64, rhacm2/multiclusterhub-rhel8@sha256:a3311e48fbf48dbb7165f44810e526031c24b4b756a6972fc2bbf8d6a8583c44_amd64 |
| Red Hat | rhacm2/thanos-rhel8@sha256:6a4f4abb065cbed85e9b2ac43234939947c101059af2bc29e561f4c842c42ddb_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/thanos-rhel8@sha256:6a4f4abb065cbed85e9b2ac43234939947c101059af2bc29e561f4c842c42ddb_amd64, rhacm2/thanos-rhel8@sha256:6a4f4abb065cbed85e9b2ac43234939947c101059af2bc29e561f4c842c42ddb_amd64, * |
| Red Hat | rhacm2/rbac-query-proxy-rhel8@sha256:0b01f8782453167af4d2bb3549d2215eeaf75813d6f39a5cfbd06d9cb063d59f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, rhacm2/rbac-query-proxy-rhel8@sha256:0b01f8782453167af4d2bb3549d2215eeaf75813d6f39a5cfbd06d9cb063d59f_ppc64le, rhacm2/rbac-query-proxy-rhel8@sha256:0b01f8782453167af4d2bb3549d2215eeaf75813d6f39a5cfbd06d9cb063d59f_ppc64le |
| Red Hat | rhacm2/multicluster-operators-channel-rhel8@sha256:cef347bab739ad4581ee1b6856c7a115bf3b4283821f8a87473e123eac3e843c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/multicluster-operators-channel-rhel8@sha256:cef347bab739ad4581ee1b6856c7a115bf3b4283821f8a87473e123eac3e843c_s390x, rhacm2/multicluster-operators-channel-rhel8@sha256:cef347bab739ad4581ee1b6856c7a115bf3b4283821f8a87473e123eac3e843c_s390x, * |
| Red Hat | rhacm2/governance-policy-template-sync-rhel8@sha256:19171cb758d807feb17186bbe0a4f982689d98215416a2ecc679be76b74d028a_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, rhacm2/governance-policy-template-sync-rhel8@sha256:19171cb758d807feb17186bbe0a4f982689d98215416a2ecc679be76b74d028a_arm64 |
| Red Hat | rhacm2/governance-policy-status-sync-rhel8@sha256:ad2468a852d30eaba67cd6a685c894280e938a7471c98f73144ead47bf1a9507_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, rhacm2/governance-policy-status-sync-rhel8@sha256:ad2468a852d30eaba67cd6a685c894280e938a7471c98f73144ead47bf1a9507_ppc64le, rhacm2/governance-policy-status-sync-rhel8@sha256:ad2468a852d30eaba67cd6a685c894280e938a7471c98f73144ead47bf1a9507_ppc64le |
| Red Hat | rhacm2/multicloud-integrations-rhel8@sha256:e0525e0b945fdc89c18b9bb9fc0ef728f38bc288cd81fae5b3ddcd5f008c39df_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | *, *, * |
| Red Hat | rhacm2/management-ingress-rhel8@sha256:3be3b5d511c7e7ad9bbfcb53a6ee92f96ee2d390ef3160a3c5bc8488e21ee747_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 | rhacm2/management-ingress-rhel8@sha256:3be3b5d511c7e7ad9bbfcb53a6ee92f96ee2d390ef3160a3c5bc8488e21ee747_amd64, rhacm2/management-ingress-rhel8@sha256:3be3b5d511c7e7ad9bbfcb53a6ee92f96ee2d390ef3160a3c5bc8488e21ee747_amd64, rhacm2/management-ingress-rhel8@sha256:3be3b5d511c7e7ad9bbfcb53a6ee92f96ee2d390ef3160a3c5bc8488e21ee747_amd64 |
…and 363 more
Timeline
- Oct 30, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6202 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2237773 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2237776 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2237777 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2237778 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6202.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39318 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39318 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39318 advisory
- https://go.dev/cl/526156 advisory
- https://go.dev/issue/62196 advisory
- https://groups.google.com/g/golang-dev/c/2C5vbR-UNkI/m/L1hdrPhfBAAJ advisory
- https://vuln.go.dev/ID/GO-2023-2041.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39319 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-39319 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-39319 advisory
…and 25 more