CVE-2023-29400

Aliases:GO-2023-1753BIT-golang-2023-29400DEBIAN-CVE-2023-29400CGA-2rc4-588j-mp3qCGA-4946-hhxf-vrhfCGA-5p8g-f2w6-2jjqCGA-685m-v73m-mfjvCGA-7m9f-jg7x-92c5CGA-8h37-vcx3-4w4mCGA-93q9-pwgv-j2m3CGA-fxrm-cc5r-hr2vCGA-gjm4-93jq-ggx2CGA-h336-m3gw-wc68CGA-h9gf-qx8w-rhh3CGA-p584-w2mh-9h2mCGA-p6jf-rxhx-q6vxCGA-q6f9-264m-c2xxCGA-r5xf-pm56-2wg7CGA-r8gm-hq9j-83gvCGA-v653-5682-4pgcCGA-wvq3-r3gc-6xmgCGA-x5xw-98fv-vqw8CGA-xm83-rj6q-qv83CGA-3cw5-gf9m-xpgqCGA-7h9r-hwj7-8m79
Advisory lineage Upstream: 0 Downstream: 25
Modified
Published: 11 May 2023, 15:29
Last modified:24 Jan 2025, 16:47

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
7.3 HIGH
v3.1 (cve.org)
EPSS Score
1.04% LOW
1% probability +0.99%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

11 May 2023, 15:29
Published
Vulnerability first disclosed
24 Jan 2025, 16:47
Last Modified
Vulnerability information updated

Description

Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.

CVSS Metrics

  • v3.1•HIGH•Score: 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS Trends

Current EPSS score: 1.04%• Percentile: 62%

Techniques & Countermeasures

  • CWE-74•Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

    The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

  • CWE-94•Improper Control of Generation of Code ('Code Injection')

    The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Affected Systems

  • chainguard•go-1.20

    < 1.20.4-r0

  • chainguard•katib-earlystopping

    < 0.19.0-r31

  • chainguard•katib-suggestion-goptuna-compat

    < 0.19.0-r40

  • chainguard•katib-suggestion-hyperband

    < 0.19.0-r31

  • chainguard•katib-suggestion-hyperopt

    < 0.19.0-r31 | < 0.19.0-r40

  • chainguard•katib-suggestion-nas-darts

    < 0.19.0-r31

  • chainguard•katib-suggestion-nas-enas

    < 0.19.0-r31

  • chainguard•katib-suggestion-optuna-enas

    < 0.19.0-r31

  • chainguard•katib-suggestion-pbt-enas

    < 0.19.0-r31

  • chainguard•katib-suggestion-skopt-enas

    < 0.19.0-r31

  • chainguard•katib-tfevent-metricscollector

    < 0.19.0-r31

  • wolfi•go-1.20

    < 1.20.4-r0

  • wolfi•katib-earlystopping

    < 0.19.0-r31

  • wolfi•katib-suggestion-goptuna-compat

    < 0.19.0-r40

  • wolfi•katib-suggestion-hyperband

    < 0.19.0-r31

  • wolfi•katib-suggestion-hyperopt

    < 0.19.0-r31 | < 0.19.0-r40

  • wolfi•katib-suggestion-nas-darts

    < 0.19.0-r31

  • wolfi•katib-suggestion-nas-enas

    < 0.19.0-r31

  • wolfi•katib-suggestion-optuna-enas

    < 0.19.0-r31

  • wolfi•katib-suggestion-pbt-enas

    < 0.19.0-r31

  • wolfi•katib-suggestion-skopt-enas

    < 0.19.0-r31

  • wolfi•katib-tfevent-metricscollector

    < 0.19.0-r31

  • debian•golang-1.15

    all

  • debian•golang-1.19

    all

  • go standard library•html/template

    < 1.19.9 | ≥ 1.20.0-0, < 1.20.4

  • golang•go

    < 1.19.9 | ≥ 1.20.0, < 1.20.4

  • Go•stdlib

    ≥ 1.20.0-0, < 1.20.4

References (9)