PT-2023-6563

🗓️ 27 Jul 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

XSS due to text nodes outside the HTML namespace being rendered literally, enabling cross-site scripting.

Reporter	Title	Published	Views	Family All 5560
OSV	CLEANSTART-2026-OX88144 Security fixes for CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61732, CVE-2026-27139 applied in versions: 1.34.1-r0, 1.34.1-r2	1 Apr 202609:45	–	osv
OSV	CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0	1 Apr 202609:45	–	osv
OSV	CLEANSTART-2026-PY85990 tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing	30 Jan 202614:07	–	osv
OSV	CLEANSTART-2026-QA19540 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-64715, CVE-2025-68119, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33726 applied in versions: 0.13.3-r0, 0.13.3-r1	18 May 202613:44	–	osv
OSV	CLEANSTART-2026-QM93035 Security fixes in opensearch-k8s-operator-fips 2.6.1-r1	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-QN98167 html	10 Apr 202600:45	–	osv
OSV	CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-QU88766 Security fixes for CVE-2025-11065, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-2464-8j7c-4cjm applied in versions: 2.2.1-r0, 2.2.1-r1, 2.2.1-r4	18 May 202613:27	–	osv
OSV	CLEANSTART-2026-QU95731 Security fixes in kubernetes 1.34.7-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-QV63914 Security fixes in ingress-nginx-controller 1.24.2-r0	30 Jul 202607:10	–	osv

Source	Link
access	www.access.redhat.com/security/cve/CVE-2023-25809
osv	www.osv.dev/vulnerability/CVE-2023-3978
osv	www.osv.dev/vulnerability/ALSA-2023:6939
osv	www.osv.dev/vulnerability/ALSA-2023:6474
osv	www.osv.dev/vulnerability/SUSE-SU-2024:4019-1
bugzilla	www.bugzilla.redhat.com/2222167
osv	www.osv.dev/vulnerability/GO-2023-1988
bdu	www.bdu.fstec.ru/vul/2023-07327
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2023-3978
access	www.access.redhat.com/security/cve/CVE-2023-24540

07 Apr 2026 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25 - 6.4

CVSS 3.19.8

EPSS0.07492

SSVC