Search for packages
Package details: pkg:rpm/redhat/openshift-serverless-1-eventing-kafka-broker-post-install-rhel8@container-1.8?arch=0-4
purl pkg:rpm/redhat/openshift-serverless-1-eventing-kafka-broker-post-install-rhel8@container-1.8?arch=0-4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.4
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-12jb-hpsk-aaak
Aliases:
CVE-2023-24539
Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input. There are no reported fixed by versions.
VCID-7wck-mgyr-aaap
Aliases:
CVE-2023-29400
Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags. There are no reported fixed by versions.
VCID-kye6-bzhe-aaar
Aliases:
CVE-2023-3089
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version