RHSA-2024:7706: Moderate: Red Hat build of Cryostat security update
First published: Mon Oct 07 2024(Updated: )
An update is now available for the Red Hat build of Cryostat 3 on RHEL 8.<br>Security Fix(es):<br><li> webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule (CVE-2024-43788)</li> <li> dompurify: XSS vulnerability via prototype pollution (CVE-2024-45801)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Cryostat |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What security vulnerabilities are addressed in RHSA-2024:7706?
RHSA-2024:7706 addresses a DOM Clobbering vulnerability in webpack (CVE-2024-43788) and an XSS vulnerability via prototype pollution in dompurify (CVE-2024-45801).
What impact do the vulnerabilities in RHSA-2024:7706 have on my Red Hat Cryostat installation?
The vulnerabilities can potentially allow unauthorized access and execution of malicious scripts, compromising the integrity and security of your Red Hat Cryostat installation.
How do I fix the vulnerabilities reported in RHSA-2024:7706?
To fix the vulnerabilities in RHSA-2024:7706, update your Red Hat Cryostat installation to the latest version provided in the advisory.
Is it necessary to apply the update for RHSA-2024:7706 immediately?
Yes, it is recommended to apply the update for RHSA-2024:7706 immediately to mitigate potential security risks associated with the vulnerabilities.
Where can I find more information about RHSA-2024:7706?
You can find more information about RHSA-2024:7706 in the official Red Hat advisory and related bug reports.
- collector/redhat-errata-latest
- source/Red Hat
- anchor-id/RHSA-2024:7706
- agent/software-canonical-lookup
- collector/redhat-errata
- agent/title
- agent/references
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/softwarecombine
- agent/remedy
- agent/type
- agent/first-publish-date
- agent/description
- agent/event
- agent/tags
- agent/source
- vendor/red hat
- canonical/red hat cryostat