Read the docs
Red Hat Security Advisory

RHSA-2024:3920

Migration Toolkit for Runtimes security, bug fix and enhancement update

Released 2024-06-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2023-24614 CVE-2023-45857 · GHSA-wf5p-g6vw-rhxx

An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN…

Priority HIGH 68

An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensiti…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00729 Published 2023-11-08 Partial fix · 1.6.0, 0.28.0 CWE-352
TI-2024-19349 CVE-2024-29180 · GHSA-wr3j-pwj9-hqq6

webpack-dev-middleware Path Traversal vulnerability

Priority HIGH 66

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01226 Published 2024-03-21 Partial fix · 7.1.0, 6.1.2 +1 CWE-22
TI-2024-19051 CVE-2024-28849 · GHSA-cxjh-pqwp-8mfp

Proxy-Authorization header kept across hosts in follow-redirects

Priority MEDIUM 62

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01044 Published 2024-03-14 Partial fix · 1.15.6 CWE-200
TI-2024-19306 CVE-2024-29133 · GHSA-9w38-p64v-xpmv

Out-of-bounds write in Apache Commons Configuration

Priority LOW 28

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01727 Published 2024-03-21 Partial fix · 2.10.1 CWE-787