Red Hat Security AdvisoryRHSA-2024:1925
Migration Toolkit for Containers (MTC) 1.8.3 security and bug fix update
Released 2024-04-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- 8Base-RHMTC-1.8 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-ui-rhel8, rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8
Fixes 2 records
Priority HIGH 68
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensiti…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00729 · Published 2023-11-08 · Partial fix · 1.6.0, 0.28.0 CWE-352
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01262 · Published 2024-03-05 · Partial fix · 1.33.0 CWE-835
