Skip to content
OpenAdvisories
Medium WID-SEC-2024-3544 2 CVEs

Red Hat JBoss Data Grid: Mehrere Schwachstellen

Published Nov 25, 2024 · Updated Nov 17, 2025 · Revision 5 · de-DE

Vendor: amazon Vendor: Debian Vendor: IBM Vendor: Red Hat Vendor: SolarWinds Product: JBoss Data Grid Product: Linux Product: Linux 2 Product: Platform Product: QRadar SIEM Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Data Grid ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um einen Denial-of-Service-Zustand zu erzeugen.

Product

Red Hat JBoss Data Grid ist eine verteilte In-Memory-Datenbank für den schnellen Zugriff auf große Datenvolumen und Skalierbarkeit.

Vulnerabilities 2

  • High 7.5
    CVE-2024-47072

    XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

    XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream wh…

    x-stream xstream libxstream-java com.thoughtworks.xstream:xstream Debian Ubuntu Maven
  • Medium 6.4
    CVE-2024-43788 Public exploit

    DOM Clobbering Gadget found in Webpack's AutoPublicPathRuntimeModule that leads to Cross-site Scripting (XSS)

    Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset. The webpack developers have discovered a DOM Clobbering vulner…

    webpack webpack katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi npm

Revision history

  1. #5

    Neue Updates aufgenommen

  2. #4

    Neue Updates von IBM aufgenommen

  3. #3

    Neue Updates von Debian aufgenommen

  4. #2

    Neue Updates von Amazon aufgenommen

  5. #1

    Initiale Fassung

References