VDB

RHSA-2023%3A7315

RHSA-2023%3A7315 PUBLISHED CVSS 6.099999904632568 MEDIUM

A flaw was found in the Golang HTML package where it is vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's web browser within the security context of the hosting website once the URL is clicked. The flaw allows an attacker to steal the victim's cookie-based authentication credentials.

Risk Scores

CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-csi-driver-manila-rhel8-operator@sha256:2829e0d889dd01d5c3e749f56f05b0b9f2d0ff6cf50c737cf3dee3de0b6ee9aa_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-csi-driver-manila-rhel8-operator@sha256:2829e0d889dd01d5c3e749f56f05b0b9f2d0ff6cf50c737cf3dee3de0b6ee9aa_ppc64le, *
Red Hatopenshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:b6e66b78e7b641908eaca5b11f80fe39d7c620d4525143790c864a785bfdae4f_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:b6e66b78e7b641908eaca5b11f80fe39d7c620d4525143790c864a785bfdae4f_ppc64le, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:b6e66b78e7b641908eaca5b11f80fe39d7c620d4525143790c864a785bfdae4f_ppc64le, openshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:b6e66b78e7b641908eaca5b11f80fe39d7c620d4525143790c864a785bfdae4f_ppc64le
Red Hatrhcos@sha256:b8750eae92ab9c61e0d856db8edf28048e7baf52f1c0d4bbbdc879a0b001e409_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *, *
Red Hatopenshift4/ose-ironic-machine-os-downloader-rhel9@sha256:2a764e7c35d27cdd87479326ffbc2eaa85f8d81256fcc1415684d38e22a723c1_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:2a764e7c35d27cdd87479326ffbc2eaa85f8d81256fcc1415684d38e22a723c1_arm64, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:2a764e7c35d27cdd87479326ffbc2eaa85f8d81256fcc1415684d38e22a723c1_arm64, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:2a764e7c35d27cdd87479326ffbc2eaa85f8d81256fcc1415684d38e22a723c1_arm64
Red Hatopenshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:83469a38dcf61eb8f1830dea9db3ecdbac002e592c9456917663df84212d2531_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:83469a38dcf61eb8f1830dea9db3ecdbac002e592c9456917663df84212d2531_arm64, openshift4/ose-csi-driver-shared-resource-webhook-rhel8@sha256:83469a38dcf61eb8f1830dea9db3ecdbac002e592c9456917663df84212d2531_arm64
Red Hatopenshift4/ose-baremetal-installer-rhel8@sha256:32889e3e6c7e74ff6a9a19a58b5a4d0f04b24081dcd7b69a3f9a4cbf9f0e88b1_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-baremetal-installer-rhel8@sha256:32889e3e6c7e74ff6a9a19a58b5a4d0f04b24081dcd7b69a3f9a4cbf9f0e88b1_arm64, *, openshift4/ose-baremetal-installer-rhel8@sha256:32889e3e6c7e74ff6a9a19a58b5a4d0f04b24081dcd7b69a3f9a4cbf9f0e88b1_arm64
Red Hatopenshift4/ose-k8s-prometheus-adapter@sha256:f70fa7d2a167ed4358b7050c41a07d3ffcce1fe64aa64060029d581330df532f_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-k8s-prometheus-adapter@sha256:f70fa7d2a167ed4358b7050c41a07d3ffcce1fe64aa64060029d581330df532f_ppc64le, openshift4/ose-k8s-prometheus-adapter@sha256:f70fa7d2a167ed4358b7050c41a07d3ffcce1fe64aa64060029d581330df532f_ppc64le
Red Hatopenshift4/ose-network-metrics-daemon-rhel8@sha256:facd71815f28f6514fc981ac60d60461024e573a7705c9cd1bb3786dd8cd6c95_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-network-metrics-daemon-rhel8@sha256:facd71815f28f6514fc981ac60d60461024e573a7705c9cd1bb3786dd8cd6c95_arm64, openshift4/ose-network-metrics-daemon-rhel8@sha256:facd71815f28f6514fc981ac60d60461024e573a7705c9cd1bb3786dd8cd6c95_arm64, openshift4/ose-network-metrics-daemon-rhel8@sha256:facd71815f28f6514fc981ac60d60461024e573a7705c9cd1bb3786dd8cd6c95_arm64
Red Hatopenshift4/ose-cluster-etcd-rhel8-operator@sha256:58f2369af42352c8fa2b731fbf55343ed160c881673e2501fab2b1176a9b32ec_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-etcd-rhel8-operator@sha256:58f2369af42352c8fa2b731fbf55343ed160c881673e2501fab2b1176a9b32ec_arm64, openshift4/ose-cluster-etcd-rhel8-operator@sha256:58f2369af42352c8fa2b731fbf55343ed160c881673e2501fab2b1176a9b32ec_arm64, openshift4/ose-cluster-etcd-rhel8-operator@sha256:58f2369af42352c8fa2b731fbf55343ed160c881673e2501fab2b1176a9b32ec_arm64
Red Hatopenshift4/ose-machine-os-images-rhel8@sha256:69f23e8a3b24f38f3c57b1fc1084b42b03100dc71e626369a3992a4b47a6b5de_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-machine-os-images-rhel8@sha256:69f23e8a3b24f38f3c57b1fc1084b42b03100dc71e626369a3992a4b47a6b5de_amd64, openshift4/ose-machine-os-images-rhel8@sha256:69f23e8a3b24f38f3c57b1fc1084b42b03100dc71e626369a3992a4b47a6b5de_amd64, openshift4/ose-machine-os-images-rhel8@sha256:69f23e8a3b24f38f3c57b1fc1084b42b03100dc71e626369a3992a4b47a6b5de_amd64
Red Hatopenshift4/ose-baremetal-installer-rhel8@sha256:784175e0ab5456487635167044940297359fd6554fa1ffa38126926cd83fc483_amd64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-baremetal-installer-rhel8@sha256:784175e0ab5456487635167044940297359fd6554fa1ffa38126926cd83fc483_amd64, openshift4/ose-baremetal-installer-rhel8@sha256:784175e0ab5456487635167044940297359fd6554fa1ffa38126926cd83fc483_amd64, openshift4/ose-baremetal-installer-rhel8@sha256:784175e0ab5456487635167044940297359fd6554fa1ffa38126926cd83fc483_amd64
Red Hatopenshift4/ose-openstack-cinder-csi-driver-rhel8@sha256:2a3b0436d7dd8b82027048ea274911f56992b00e8d31d2633ddf2864de5d88f3_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *, *
Red Hatopenshift4/ose-csi-driver-manila-rhel8@sha256:6a4105fe6895e0286fbddb1259efba92296971c70da74355e4766dce058f77c0_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-csi-driver-manila-rhel8@sha256:6a4105fe6895e0286fbddb1259efba92296971c70da74355e4766dce058f77c0_ppc64le, *, *
Red Hatopenshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:13b0aeb65343b2c89b857644d0937f4369dcf031794e83cc6eac05b97e0c6ba8_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:13b0aeb65343b2c89b857644d0937f4369dcf031794e83cc6eac05b97e0c6ba8_ppc64le, openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:13b0aeb65343b2c89b857644d0937f4369dcf031794e83cc6eac05b97e0c6ba8_ppc64le
Red Hatopenshift4/ose-k8s-prometheus-adapter@sha256:026cffc5f057d30eafb7f0e75b29f5c17a4290dc38737531ec0e70f703420bc3_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-k8s-prometheus-adapter@sha256:026cffc5f057d30eafb7f0e75b29f5c17a4290dc38737531ec0e70f703420bc3_s390x, *, *
Red Hatopenshift4/ose-cluster-etcd-rhel8-operator@sha256:ffd89303a3766bc4aeb2bc18b3d81249f59e5eec9cc7ee0bf1cff446d162515e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-etcd-rhel8-operator@sha256:ffd89303a3766bc4aeb2bc18b3d81249f59e5eec9cc7ee0bf1cff446d162515e_ppc64le, openshift4/ose-cluster-etcd-rhel8-operator@sha256:ffd89303a3766bc4aeb2bc18b3d81249f59e5eec9cc7ee0bf1cff446d162515e_ppc64le, openshift4/ose-cluster-etcd-rhel8-operator@sha256:ffd89303a3766bc4aeb2bc18b3d81249f59e5eec9cc7ee0bf1cff446d162515e_ppc64le
Red Hatopenshift4/ose-network-metrics-daemon-rhel8@sha256:2bbde5d22844f79ee08069be9d12ad61d8365b872e10bbd99d1d7a25b3c143c5_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-network-metrics-daemon-rhel8@sha256:2bbde5d22844f79ee08069be9d12ad61d8365b872e10bbd99d1d7a25b3c143c5_s390x, *, *
Red Hatopenshift4/ose-cluster-node-tuning-operator@sha256:d81633a941c074b3d036e7785e41abb46887012899dba9b89b531c283a0b9480_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, *, *
Red Hatopenshift4/ose-baremetal-installer-rhel8@sha256:cc4d3838ef3c4b9a5d5ffa05ae829c1de7022c8cc16f9d785a161b9c90b8dd49_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-baremetal-installer-rhel8@sha256:cc4d3838ef3c4b9a5d5ffa05ae829c1de7022c8cc16f9d785a161b9c90b8dd49_ppc64le
Red Hatopenshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:b7e493abd5a12b988d1586b433ffecebc5af52bc5357a2d6be2307d45527519d_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:b7e493abd5a12b988d1586b433ffecebc5af52bc5357a2d6be2307d45527519d_amd64, openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:b7e493abd5a12b988d1586b433ffecebc5af52bc5357a2d6be2307d45527519d_amd64

…and 229 more

Timeline

  • Nov 21, 2023 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 21, 2026 CVE Updated

References

…and 28 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›