Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-29400HistoryMay 11, 2023 - 4:15 p.m.
CVE-2023-29400
2023-05-1116:15:09
Alpine Linux Development Team
security.alpinelinux.org
34
html normalization injection
unquoted attributes
unexpected output
arbitrary injection
action execution
empty input
templates
security vulnerability
html parsing
0.001 Low
EPSS
Percentile
43.3%
Templates containing actions in unquoted HTML attributes (e.g. “attr={{.}}”) executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | go | < 1.20.4-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | go | < 1.19.9-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | go | < 1.20.4-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | go | < 1.20.4-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | go | < 1.20.4-r0 | UNKNOWN |
Related
cgr
cgr
CVE-2023-29400 vulnerabilities
2024-05-19 03:07:16
osv
osv
Improper handling of empty HTML attributes in html/template
2023-05-05 21:10:24
BIT-golang-2023-29400
2024-03-06 10:55:58
CVE-2023-29400
2023-05-11 16:15:09
cbl_mariner
cbl_mariner
CVE-2023-29400 affecting package golang for versions less than 1.20.7-1
2024-06-02 15:22:37
CVE-2023-29400 affecting package golang for versions less than 1.20.7-1
2024-06-02 15:22:43
CVE-2023-29400 affecting package msft-golang for versions less than 1.20.7-1
2024-06-02 15:22:43
cve
cve
CVE-2023-29400
2023-05-11 16:15:09
debiancve
debiancve
CVE-2023-29400
2023-05-11 16:15:09
ubuntucve
ubuntucve
CVE-2023-29400
2023-05-11 00:00:00
veracode
veracode
Command Injection
2023-05-14 12:08:29
cvelist
cvelist
CVE-2023-29400 Improper handling of empty HTML attributes in html/template
2023-05-11 15:29:24
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to HTML injection in Golang Go ( CVE-2023-29400)
2023-07-27 17:30:17
Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator vulnerabilities
2024-02-20 19:45:04
Security Bulletin: Multiple vulnerabilities in golang affect IBM Db2® REST
2023-06-07 15:44:22
prion
prion
Code injection
2023-05-11 16:15:00
redhatcve
redhatcve
CVE-2023-29400
2023-05-08 09:53:02
wolfi
wolfi
CVE-2023-29400 vulnerabilities
2024-06-02 15:23:11
nessus
nessus
EulerOS 2.0 SP9 : golang (EulerOS-SA-2023-2583)
2023-08-08 00:00:00
Amazon Linux AMI : golang (ALAS-2023-1760)
2023-06-09 00:00:00
CentOS 9 : toolbox-0.0.99.4-5.el9
2024-04-26 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2023-05-16 22:17:40
openvas
openvas
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2613)
2023-08-08 00:00:00
Gitea < 1.19.3 Multiple golang Vulnerabilities
2023-05-09 00:00:00
Mageia: Security Advisory (MGASA-2023-0169)
2023-05-17 00:00:00
redhat
redhat
f5
f5
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.19.9-alt1
2023-05-03 00:00:00
amazon
amazon
Important: golang
2023-06-05 16:39:00
Important: golang
2023-07-20 17:29:00
Important: golang
2023-09-27 22:15:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0387
2023-05-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0575
2023-05-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0037
2023-06-23 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
oraclelinux
oraclelinux
containernetworking-plugins security and bug fix update
2023-11-11 00:00:00
skopeo security update
2023-11-11 00:00:00
buildah security update
2023-11-11 00:00:00
almalinux
almalinux
Moderate: toolbox security and bug fix update
2023-11-07 00:00:00
Moderate: containernetworking-plugins security and bug fix update
2023-11-07 00:00:00
Moderate: buildah security update
2023-11-07 00:00:00
redos
redos
ROS-20240418-06
2024-04-18 00:00:00