VDB

RHSA-2024%3A10523

RHSA-2024%3A10523 PUBLISHED CVSS 6.099999904632568 MEDIUM

A flaw was found in the Golang HTML package where it is vulnerable to Cross-site scripting caused by the improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially crafted URL to execute a script in a victim's web browser within the security context of the hosting website once the URL is clicked. The flaw allows an attacker to steal the victim's cookie-based authentication credentials.

Risk Scores

CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-openshift-apiserver-rhel8@sha256:6f96ec621820296d2fe58b72189bbe3d86992b0f0a24f185d10186c457ccc77a_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-openshift-apiserver-rhel8@sha256:6f96ec621820296d2fe58b72189bbe3d86992b0f0a24f185d10186c457ccc77a_ppc64le, openshift4/ose-openshift-apiserver-rhel8@sha256:6f96ec621820296d2fe58b72189bbe3d86992b0f0a24f185d10186c457ccc77a_ppc64le, openshift4/ose-openshift-apiserver-rhel8@sha256:6f96ec621820296d2fe58b72189bbe3d86992b0f0a24f185d10186c457ccc77a_ppc64le
Red Hatopenshift4/ose-cluster-openshift-controller-manager-operator@sha256:2cb7dc8fa79d41380ae92d422391fced5a7813fc7cd797abeb980edd86bd88d1_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2cb7dc8fa79d41380ae92d422391fced5a7813fc7cd797abeb980edd86bd88d1_arm64, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2cb7dc8fa79d41380ae92d422391fced5a7813fc7cd797abeb980edd86bd88d1_arm64, openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2cb7dc8fa79d41380ae92d422391fced5a7813fc7cd797abeb980edd86bd88d1_arm64
Red Hatopenshift4/ose-cluster-dns-operator@sha256:1cd91bfef6a21f1bf4f6176302c4e2999cee60421f3b4811af055d44907d28ed_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-dns-operator@sha256:1cd91bfef6a21f1bf4f6176302c4e2999cee60421f3b4811af055d44907d28ed_arm64, *, *
Red Hatopenshift4/ose-openshift-state-metrics-rhel8@sha256:8e733ad94da94280e284fe3fe5512d95afd15524475b57d6634aedec1246d4ec_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-openshift-state-metrics-rhel8@sha256:8e733ad94da94280e284fe3fe5512d95afd15524475b57d6634aedec1246d4ec_amd64, *
Red Hatopenshift4/ose-apiserver-network-proxy-rhel8@sha256:c166edf53ab8d618843883c2390a4587cb5823f85126f02c6e0cbc97496e32d7_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-apiserver-network-proxy-rhel8@sha256:c166edf53ab8d618843883c2390a4587cb5823f85126f02c6e0cbc97496e32d7_amd64, openshift4/ose-apiserver-network-proxy-rhel8@sha256:c166edf53ab8d618843883c2390a4587cb5823f85126f02c6e0cbc97496e32d7_amd64
Red Hatopenshift4/ose-baremetal-rhel8-operator@sha256:a9700b61f5a13291bf57a98df501b361c169d344e5ee44b21f0cb6f393593d5d_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-baremetal-rhel8-operator@sha256:a9700b61f5a13291bf57a98df501b361c169d344e5ee44b21f0cb6f393593d5d_ppc64le, openshift4/ose-baremetal-rhel8-operator@sha256:a9700b61f5a13291bf57a98df501b361c169d344e5ee44b21f0cb6f393593d5d_ppc64le, openshift4/ose-baremetal-rhel8-operator@sha256:a9700b61f5a13291bf57a98df501b361c169d344e5ee44b21f0cb6f393593d5d_ppc64le
Red Hatrhcos@sha256:98445015dff50975c571e5cdc11d26048e43029556284dbf671be2be04a36974_ppc64le as a component of Red Hat OpenShift Container Platform 4.14rhcos@sha256:98445015dff50975c571e5cdc11d26048e43029556284dbf671be2be04a36974_ppc64le, rhcos@sha256:98445015dff50975c571e5cdc11d26048e43029556284dbf671be2be04a36974_ppc64le, rhcos@sha256:98445015dff50975c571e5cdc11d26048e43029556284dbf671be2be04a36974_ppc64le
Red Hatopenshift4/ose-powervs-block-csi-driver-rhel8@sha256:5e989ba964d3969b3d2ce7102e08835d6f380b45b1cf2962d820e30437d72b3b_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-powervs-block-csi-driver-rhel8@sha256:5e989ba964d3969b3d2ce7102e08835d6f380b45b1cf2962d820e30437d72b3b_ppc64le, openshift4/ose-powervs-block-csi-driver-rhel8@sha256:5e989ba964d3969b3d2ce7102e08835d6f380b45b1cf2962d820e30437d72b3b_ppc64le, *
Red Hatopenshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:fbb0efbac13c5df17622e344f40d546467d0fbb50d4e1cacac93d1b8230b28c0_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:fbb0efbac13c5df17622e344f40d546467d0fbb50d4e1cacac93d1b8230b28c0_s390x, *, openshift4/ose-cluster-kube-cluster-api-rhel8-operator@sha256:fbb0efbac13c5df17622e344f40d546467d0fbb50d4e1cacac93d1b8230b28c0_s390x
Red Hatopenshift4/ose-cluster-capi-rhel8-operator@sha256:a32bd9b5d0bb9b9046708e7c0394ef9d88a020a494ce848554684e99578007be_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-capi-rhel8-operator@sha256:a32bd9b5d0bb9b9046708e7c0394ef9d88a020a494ce848554684e99578007be_arm64, openshift4/ose-cluster-capi-rhel8-operator@sha256:a32bd9b5d0bb9b9046708e7c0394ef9d88a020a494ce848554684e99578007be_arm64, openshift4/ose-cluster-capi-rhel8-operator@sha256:a32bd9b5d0bb9b9046708e7c0394ef9d88a020a494ce848554684e99578007be_arm64
Red Hatopenshift4/ose-gcp-cluster-api-controllers-rhel8@sha256:6bc281627b5cdbdec07e109cf2429b15e1c7f1a9ab3ee779383dd3ffe4858636_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, *, *
Red Hatopenshift4/ose-docker-registry@sha256:09025ccb42789f554d8c723c06bb2822fb58b71961452b5a1b1d5468390a6fad_arm64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-docker-registry@sha256:09025ccb42789f554d8c723c06bb2822fb58b71961452b5a1b1d5468390a6fad_arm64, openshift4/ose-docker-registry@sha256:09025ccb42789f554d8c723c06bb2822fb58b71961452b5a1b1d5468390a6fad_arm64
Red Hatopenshift4/ose-prom-label-proxy@sha256:3a4d8b55ad3eb95c30a3d6fdc1c1ba630358b07ab7292c9bfc4788123d2ebcf9_ppc64le as a component of Red Hat OpenShift Container Platform 4.14*, *, openshift4/ose-prom-label-proxy@sha256:3a4d8b55ad3eb95c30a3d6fdc1c1ba630358b07ab7292c9bfc4788123d2ebcf9_ppc64le
Red Hatopenshift4/ose-cluster-version-operator@sha256:f200ac3cefc4f7ca56191ea0ac7839c2bd175dd567a973035685edd6a7668dad_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-cluster-version-operator@sha256:f200ac3cefc4f7ca56191ea0ac7839c2bd175dd567a973035685edd6a7668dad_ppc64le, openshift4/ose-cluster-version-operator@sha256:f200ac3cefc4f7ca56191ea0ac7839c2bd175dd567a973035685edd6a7668dad_ppc64le, *
Red Hatopenshift4/ose-docker-builder@sha256:36c5e851f7cd87e15635ca613e734dbb61dd1bc0edd4c1bbda19afb26ff2844a_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-docker-builder@sha256:36c5e851f7cd87e15635ca613e734dbb61dd1bc0edd4c1bbda19afb26ff2844a_s390x, openshift4/ose-docker-builder@sha256:36c5e851f7cd87e15635ca613e734dbb61dd1bc0edd4c1bbda19afb26ff2844a_s390x, openshift4/ose-docker-builder@sha256:36c5e851f7cd87e15635ca613e734dbb61dd1bc0edd4c1bbda19afb26ff2844a_s390x
Red Hatopenshift4/ovirt-csi-driver-rhel7@sha256:3dddf443081a3cc4bbedbe07932ca5843eb014bc534a8527a2f3ab106307fd88_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ovirt-csi-driver-rhel7@sha256:3dddf443081a3cc4bbedbe07932ca5843eb014bc534a8527a2f3ab106307fd88_ppc64le, openshift4/ovirt-csi-driver-rhel7@sha256:3dddf443081a3cc4bbedbe07932ca5843eb014bc534a8527a2f3ab106307fd88_ppc64le, openshift4/ovirt-csi-driver-rhel7@sha256:3dddf443081a3cc4bbedbe07932ca5843eb014bc534a8527a2f3ab106307fd88_ppc64le
Red Hatopenshift4/ose-agent-installer-node-agent-rhel9@sha256:86731f0fa23d542484f194221603c03c0220fe65aa2a112b69f507a32899ab66_ppc64le as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-agent-installer-node-agent-rhel9@sha256:86731f0fa23d542484f194221603c03c0220fe65aa2a112b69f507a32899ab66_ppc64le, openshift4/ose-agent-installer-node-agent-rhel9@sha256:86731f0fa23d542484f194221603c03c0220fe65aa2a112b69f507a32899ab66_ppc64le, openshift4/ose-agent-installer-node-agent-rhel9@sha256:86731f0fa23d542484f194221603c03c0220fe65aa2a112b69f507a32899ab66_ppc64le
Red Hatopenshift4/ose-monitoring-plugin-rhel8@sha256:8d0bea04e80fa1b20cc93e0d0ecb4e418533a6c90e9ab802619c927f546bd953_arm64 as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-monitoring-plugin-rhel8@sha256:8d0bea04e80fa1b20cc93e0d0ecb4e418533a6c90e9ab802619c927f546bd953_arm64, *, *
Red Hatopenshift4/ose-service-ca-operator@sha256:fe4b268abecc31dec39225abf510ae0279035be30a1084b55c18b5f391e48bd1_s390x as a component of Red Hat OpenShift Container Platform 4.14openshift4/ose-service-ca-operator@sha256:fe4b268abecc31dec39225abf510ae0279035be30a1084b55c18b5f391e48bd1_s390x, openshift4/ose-service-ca-operator@sha256:fe4b268abecc31dec39225abf510ae0279035be30a1084b55c18b5f391e48bd1_s390x, openshift4/ose-service-ca-operator@sha256:fe4b268abecc31dec39225abf510ae0279035be30a1084b55c18b5f391e48bd1_s390x
Red Hatopenshift4/ose-cluster-version-operator@sha256:41c20e4f3af36e100f086c6ad34e526b105888c713a1f38a101b3c847b18dc49_amd64 as a component of Red Hat OpenShift Container Platform 4.14*, openshift4/ose-cluster-version-operator@sha256:41c20e4f3af36e100f086c6ad34e526b105888c713a1f38a101b3c847b18dc49_amd64, openshift4/ose-cluster-version-operator@sha256:41c20e4f3af36e100f086c6ad34e526b105888c713a1f38a101b3c847b18dc49_amd64

…and 1342 more

Timeline

  • Dec 5, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 16, 2026 CVE Updated

References

…and 9 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›