RHSA-2024:7706: Moderate: Red Hat build of Cryostat security update
An update is now available for the Red Hat build of Cryostat 3 on RHEL 8.Security Fix(es): webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule (CVE-2024-43788) dompurify: XSS vulnerability via prototype pollution (CVE-2024-45801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Moderate: Red Hat build of Cryostat security update
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What security vulnerabilities are addressed in RHSA-2024:7706?
RHSA-2024:7706 addresses a DOM Clobbering vulnerability in webpack (CVE-2024-43788) and an XSS vulnerability via prototype pollution in dompurify (CVE-2024-45801).
What impact do the vulnerabilities in RHSA-2024:7706 have on my Red Hat Cryostat installation?
The vulnerabilities can potentially allow unauthorized access and execution of malicious scripts, compromising the integrity and security of your Red Hat Cryostat installation.
How do I fix the vulnerabilities reported in RHSA-2024:7706?
To fix the vulnerabilities in RHSA-2024:7706, update your Red Hat Cryostat installation to the latest version provided in the advisory.
Is it necessary to apply the update for RHSA-2024:7706 immediately?
Yes, it is recommended to apply the update for RHSA-2024:7706 immediately to mitigate potential security risks associated with the vulnerabilities.
Where can I find more information about RHSA-2024:7706?
You can find more information about RHSA-2024:7706 in the official Red Hat advisory and related bug reports.