PT-2023-3322 · Go +9 · Go +9

🗓️ 20 Apr 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

Go templates allow attribute injection via unquoted hypertext attributes; remote exploitation possible; versions not specified.

Reporter	Title	Published	Views	Family All 7922
ibm	Security Bulletin: Operations Dashboard is vulnerable to remote code execution due to Go	15 Nov 202313:35	–	ibm
ibm	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
ibm	Security Bulletin: IBM Cloud Pak for Data Scheduling was built with a vulnerable golang compiler. ( CVE-2023-29406, CVE-2023-29409 )	6 Dec 202315:44	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-41724)	27 Jul 202317:38	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator are vulnerable to [CVE-2023-24532]	28 Jun 202315:04	–	ibm
ibm	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
ibm	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for Febuary 2023	10 Mar 202318:29	–	ibm
ibm	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
ibm	Security Bulletin: Vulnerabilities in Golang Go and Java SE might affect IBM Spectrum Copy Data Management (CVE-2022-41717, CVE-2023-21830, CVE-2023-21835, CVE-2023-21843)	16 Mar 202318:03	–	ibm

Source	Link
github	www.github.com/bcdannyboy/CVE-2023-44487
github	www.github.com/imabee101/CVE-2023-44487
github	www.github.com/studiogangster/CVE-2023-44487
github	www.github.com/nxenon/cve-2023-44487
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/704884
linux	www.linux.oracle.com/errata/ELSA-2023-6402.html
bdu	www.bdu.fstec.ru/vul/2023-03860
osv	www.osv.dev/vulnerability/ALSA-2023:6938
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2023-24537

13 Dec 2024 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.5

CVSS 3.19.8

EPSS0.99999

SSVC