Fluid Attacks Database

Description

Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	golang-1.19	=1.19.10-1 \|\| =1.19.10-2 \|\| =1.19.11-1 \|\| =1.19.12-1 \|\| =1.19.12-2 \|\| =1.19.12-2~bpo11+1 \|\| =1.19.12-2~bpo12+1 \|\| =1.19.13-1 \|\| =1.19.13-1~bpo11+1 \|\| =1.19.13-1~bpo12+1 \|\| =1.19.8-2 \|\| =1.19.9-1	-
debian 11	golang-1.15	=1.15.15-1 \|\| =1.15.15-1~deb11u1 \|\| =1.15.15-1~deb11u2 \|\| =1.15.15-1~deb11u3 \|\| =1.15.15-1~deb11u4 \|\| =1.15.15-2 \|\| =1.15.15-3 \|\| =1.15.15-4 \|\| =1.15.15-5 \|\| =1.15.9-6	-
go	stdlib	>=0 <1.19.9	1.19.9
rpm rhel9	skopeo	<2:1.13.3-1.el9	2:1.13.3-1.el9
rpm rhel9	toolbox	<0:0.0.99.4-6.el9_3	0:0.0.99.4-6.el9_3
rpm rhel9	ignition	-	-
rpm rhel9	golang	<0:1.19.9-2.el9_2	0:1.19.9-2.el9_2
rpm rhel9	podman	<2:4.6.1-5.el9	2:4.6.1-5.el9
rpm rhel8	toolbox	-	-
rpm rhel9	buildah	<1:1.31.3-1.el9	1:1.31.3-1.el9

1-10 of 14

Aliases

1. CVE-2023-294002. NVD-2023-294003. OSV-DEBIAN-2023-294004. OSV-2023-294005. OSV-GO-2023-17536. GCVE-2023-294007. SECURITY-TRACKER-CVE-2023-29400

References

1. https://go.dev/issue/597222. https://go.dev/cl/4916173. https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.