Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-29400HistoryMay 11, 2023 - 4:15 p.m.
CVE-2023-29400
2023-05-1116:15:09
Debian Security Bug Tracker
security-tracker.debian.org
9
0.001 Low
EPSS
Percentile
38.0%
Templates containing actions in unquoted HTML attributes (e.g. “attr={{.}}”) executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | golang-1.11 | <= 1.11.6-1+deb10u4 | golang-1.11_1.11.6-1+deb10u4_all.deb |
| Debian | 11 | all | golang-1.15 | <= 1.15.15-1~deb11u4 | golang-1.15_1.15.15-1~deb11u4_all.deb |
| Debian | 12 | all | golang-1.19 | <= 1.19.8-2 | golang-1.19_1.19.8-2_all.deb |
Related
ubuntucve
ubuntucve
CVE-2023-29400
2023-05-11 00:00:00
cve
cve
CVE-2023-29400
2023-05-11 16:15:09
osv
osv
BIT-golang-2023-29400
2024-03-06 10:55:58
Improper handling of empty HTML attributes in html/template
2023-05-05 21:10:24
CVE-2023-29400
2023-05-11 16:15:09
cgr
cgr
CVE-2023-29400 vulnerabilities
2024-05-16 21:07:09
prion
prion
Code injection
2023-05-11 16:15:00
redhatcve
redhatcve
CVE-2023-29400
2023-05-08 09:53:02
wolfi
wolfi
CVE-2023-29400 vulnerabilities
2024-05-16 21:07:10
cbl_mariner
cbl_mariner
CVE-2023-29400 affecting package msft-golang for versions less than 1.20.7-1
2024-05-16 21:07:16
CVE-2023-29400 affecting package golang for versions less than 1.20.7-1
2024-05-16 21:07:16
CVE-2023-29400 affecting package golang for versions less than 1.20.7-1
2024-05-16 21:07:10
veracode
veracode
Command Injection
2023-05-14 12:08:29
ibm
ibm
cvelist
cvelist
CVE-2023-29400 Improper handling of empty HTML attributes in html/template
2023-05-11 15:29:24
alpinelinux
alpinelinux
CVE-2023-29400
2023-05-11 16:15:09
nessus
nessus
RHEL 9 : OpenShift Container Platform 4.13.8 (RHSA-2023:4459)
2024-04-28 00:00:00
Golang < 1.19.9 / 1.20.x < 1.20.4 Multiple Vulnerabilities
2023-05-05 00:00:00
Amazon Linux AMI : golang (ALAS-2023-1760)
2023-06-09 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0169)
2023-05-17 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2583)
2023-08-08 00:00:00
Gitea < 1.19.3 Multiple golang Vulnerabilities
2023-05-09 00:00:00
amazon
amazon
Important: golang
2023-06-05 16:39:00
Important: golang
2023-07-20 17:29:00
Important: golang
2023-09-27 22:15:00
mageia
mageia
Updated golang packages fix security vulnerability
2023-05-16 22:17:40
f5
f5
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.19.9-alt1
2023-05-03 00:00:00
redhat
redhat
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0387
2023-05-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0575
2023-05-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0037
2023-06-23 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
ubuntu
ubuntu
Go vulnerabilities
2023-06-06 00:00:00
almalinux
almalinux
Moderate: containernetworking-plugins security and bug fix update
2023-11-07 00:00:00
Moderate: toolbox security and bug fix update
2023-11-07 00:00:00
Moderate: skopeo security update
2023-11-07 00:00:00
oraclelinux
oraclelinux
containernetworking-plugins security and bug fix update
2023-11-11 00:00:00
buildah security update
2023-11-11 00:00:00
skopeo security update
2023-11-11 00:00:00
redos
redos
ROS-20240418-06
2024-04-18 00:00:00