Bug 2318052 (CVE-2024-47875)
| Summary: | CVE-2024-47875 dompurify: nesting-based mutation XSS vulnerability | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | abarbaro, akostadi, alcohan, alizardo, amasferr, amctagga, anjoseph, brking, chazlett, danken, dmayorov, fdeutsch, gkamathe, gparvin, haoli, hkataria, jbalunas, jcammara, jcantril, jchui, jhe, jkoehler, jlledo, jmitchel, jneedle, jprabhak, jwendell, kegrant, koliveir, kshier, ktsao, lchilton, lphiri, mabashia, mjaros, mmakovy, nboldt, njean, oramraz, owatkins, pahickey, pantinor, pbraun, phoracek, psrna, rcernich, rhaigner, rojacob, rtaniwa, sdawley, sfeifer, shvarugh, simaishi, smcdonal, smullick, stcannon, stirabos, teagle, tfister, thason, thavo, tjochec, tkral, tsedmik, twalsh, wtam, yguenane |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: |
A flaw was found in DOMPurify that could allow for a nesting-based mXSS to not be properly sanitized.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2024-10-11 15:20:46 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:8327 https://access.redhat.com/errata/RHSA-2024:8327 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:8678 https://access.redhat.com/errata/RHSA-2024:8678 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.16 Via RHSA-2024:8683 https://access.redhat.com/errata/RHSA-2024:8683 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:9473 https://access.redhat.com/errata/RHSA-2024:9473 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.17 Via RHSA-2024:8981 https://access.redhat.com/errata/RHSA-2024:8981 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.15 Via RHSA-2024:8991 https://access.redhat.com/errata/RHSA-2024:8991 This issue has been addressed in the following products: Red Hat OpenShift Service Mesh 2.5 for RHEL 8 Via RHSA-2024:9629 https://access.redhat.com/errata/RHSA-2024:9629 This issue has been addressed in the following products: Red Hat OpenShift Container Platform 4.14 Via RHSA-2024:9620 https://access.redhat.com/errata/RHSA-2024:9620 This issue has been addressed in the following products: Red Hat OpenShift Dev Spaces 3 Containers Via RHSA-2024:10236 https://access.redhat.com/errata/RHSA-2024:10236 |