Read the docs
Red Hat Security Advisory

RHSA-2024:9620

OpenShift Container Platform 4.14.41 bug fix and security update

Released 2024-11-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2024-06036 CVE-2024-6508 · GHSA-4crf-28c7-v4gr

Openshift-console: oauth2 insufficient state parameter entropy

Priority HIGH 70

An insufficient entropy vulnerability was found in the Openshift Console.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00673 Published 2024-08-21 Fixed in v4.12.0-202412201659.p0.g8910d84.assembly.stream.el8, v4.13.0-202411300029.p0.g68accd9.assembly.stream.el8 +167 CWE-331
TI-2024-32607 CVE-2024-48910 · GHSA-p3vf-v8qc-cwcr

DOMPurify vulnerable to tampering by prototype polution

Priority MEDIUM 51

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2024-10-31 Partial fix · 2.4.2 CWE-1321
TI-2024-32129 CVE-2024-47875 · GHSA-gx9m-whjm-85jf

DOMPurify nesting-based mXSS

Priority MEDIUM 45

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01134 Published 2024-10-11 Partial fix · 2.5.0, 3.1.3 CWE-79