Skip to content
OpenAdvisories
Medium WID-SEC-2024-3733 3 CVEs

Red Hat Advanced Cluster Management: Mehrere Schwachstellen

Published Dec 18, 2024 · Updated Feb 4, 2025 · Revision 2 · de-DE

Vendor: Red Hat Product: Enterprise Linux Product: openshift Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Advanced Cluster Management ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder einen Cross-Site-Scripting-Angriff durchzuführen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 3

  • High 7.5
    CVE-2024-45296

    path-to-regexp outputs backtracking regular expressions

    path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. Because JavaScript is single threaded and regex matching runs on the main thread, …

    pillarjs path-to-regexp thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Azure Linux Wolfi npm
  • High 7.3
    CVE-2024-45801

    Tampering by prototype polution in DOMPurify

    DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking added to DOMPurify in recent releases. It was also possible to…

    cure53 DOMPurify argo-workflows dompurify Debian Ubuntu Wolfi npm
  • Medium 5.3
    CVE-2024-45813

    ReDoS vulnerability in multiparametric routes in find-my-way

    find-my-way is a fast, open source HTTP router, internally using a Radix Tree (aka compact Prefix Tree), supports route params, wildcards, and it's framework independent. A bad regular expression is generated any time one has two parameters within a single se…

    delvedor find-my-way find-my-way npm

Revision history

  1. #2

    Neue Updates von Red Hat aufgenommen

  2. #1

    Initiale Fassung

References