Red Hat Security Advisory

RHSA-2024:0720

Migration Toolkit for Runtimes security, bug fix and enhancement update

Released 2024-02-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

MTR 1.2.4

Fixes 2 records

TI-2023-11383 CVE-2023-26159 · GHSA-jchw-25xp-jwwc

Improper input validation in follow-redirects

HIGH 65

Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse() function.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00797 Published 2024-01-02 Partial fix · 1.15.4 CWE-20

TI-2022-23117 CVE-2022-46751 · GHSA-2jc4-r94c-rp7h

Apache Ivy: XML External Entity vulnerability in Apache Ivy

MEDIUM 46

Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01999 Published 2023-08-21 Partial fix · 2.5.2 CWE-611