RHSA-2024:8023HighCVSS 7.5
Red Hat Security Advisory: Release of OpenShift Serverless Logic 1.34.0 security update & enhancements
🔗 CVE IDs covered (6)
📋 Description
CVE-2024-8391 — io.vertx:vertx-grpc-client: io.vertx:vertx-grpc-server: Vertx gRPC server does not limit the maximum message size CVE-2024-39338 — axios: axios: Server-Side Request Forgery CVE-2024-43788 — webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule CVE-2024-43796 — express: Improper Input Handling in Express Redirects CVE-2024-43799 — send: Code Execution Vulnerability in Send Library CVE-2024-43800 — serve-static: Improper Sanitization in serve-static
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2024:8023
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2308193
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2309758
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311152
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311153
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2311154
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8023.json