Red Hat Security Advisory

RHSA-2024:8981

OpenShift Container Platform 4.17.4 bug fix and security update

Released 2024-11-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.17 openshift4/ose-console-rhel9, openshift4/ose-monitoring-plugin-rhel9

TI-2024-26292 CVE-2024-39338 · GHSA-8hc4-vh64-cxmj

HIGH 66

axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01207 Published 2024-08-09 Partial fix · 1.7.4 CWE-918

TI-2024-32129 CVE-2024-47875 · GHSA-gx9m-whjm-85jf

MEDIUM 45

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01134 Published 2024-10-11 Partial fix · 2.5.0, 3.1.3 CWE-79