RHSA-2023:1428HighCVSS 8.8

Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.8 security and bug fix update

Published
March 23, 2023
Last Modified
May 27, 2026

🔗 CVE IDs covered (8)

CVE-2022-24999 →CVE-2022-25881 →CVE-2022-25927 →CVE-2022-37603 →CVE-2022-38900 →CVE-2022-46175 →CVE-2022-48285 →CVE-2020-36567 →

📋 Description

CVE-2020-36567 — gin: Unsanitized input in the default logger in github.com/gin-gonic/gin CVE-2022-24999 — express: "qs" prototype poisoning causes the hang of the node process CVE-2022-25881 — http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability CVE-2022-25927 — ua-parser-js: ReDoS vulnerability via the trim() function CVE-2022-37603 — loader-utils: Regular expression denial of service CVE-2022-38900 — decode-uri-component: improper input validation resulting in DoS CVE-2022-46175 — json5: Prototype Pollution in JSON5 via Parse Method CVE-2022-48285 — jszip: directory traversal via a crafted ZIP archive

🔗 References (18)