RHSA-2024%3A0853 — Vulnetix

RHSA-2024%3A0853 PUBLISHED CVSS 6.099999904632568 MEDIUM

An Improper Input Validation flaw was found in follow-redirects due to the improper handling of URLs by the url.parse() function. When a new URL() throws an error, it can be manipulated to misinterpret the hostname. This issue could allow an attacker to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.

Risk Scores

CVSS 3.1

6.099999904632568

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

Timeline

Feb 21, 2024 CVE Published
Apr 24, 2026 CVE Updated
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2024:0853 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2256413 issue
https://issues.redhat.com/browse/NETOBSERV-1134 advisory
https://issues.redhat.com/browse/NETOBSERV-1225 advisory
https://issues.redhat.com/browse/NETOBSERV-1286 advisory
https://issues.redhat.com/browse/NETOBSERV-1293 advisory
https://issues.redhat.com/browse/NETOBSERV-1305 advisory
https://issues.redhat.com/browse/NETOBSERV-1311 advisory
https://issues.redhat.com/browse/NETOBSERV-1313 advisory
https://issues.redhat.com/browse/NETOBSERV-1316 advisory
https://issues.redhat.com/browse/NETOBSERV-1335 advisory
https://issues.redhat.com/browse/NETOBSERV-1341 advisory
https://issues.redhat.com/browse/NETOBSERV-1351 advisory
https://issues.redhat.com/browse/NETOBSERV-1380 advisory
https://issues.redhat.com/browse/NETOBSERV-1430 advisory
https://issues.redhat.com/browse/NETOBSERV-1443 advisory
https://issues.redhat.com/browse/NETOBSERV-1464 advisory
https://issues.redhat.com/browse/NETOBSERV-245 advisory
https://issues.redhat.com/browse/NETOBSERV-657 advisory

…and 6 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:d22a932d5cfbe8e79542ad4d718f09724bd6a37ced80ac29b7d9c8c9dc2148cd_arm64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:d22a932d5cfbe8e79542ad4d718f09724bd6a37ced80ac29b7d9c8c9dc2148cd_arm64
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:514cfc58f43b4e9a544d8c49ba595f17e423fca99b0cdad7022983cdbba206e2_ppc64le as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:514cfc58f43b4e9a544d8c49ba595f17e423fca99b0cdad7022983cdbba206e2_ppc64le
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:f456e8892837b334436ce9417364fbca1c00395e54fa9b8a82b97e0bd1a311ba_ppc64le as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:f456e8892837b334436ce9417364fbca1c00395e54fa9b8a82b97e0bd1a311ba_ppc64le
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:44b139d80784617055688a85a1257a6b29dd337281be23ad70bb431bd4bddd37_s390x as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:44b139d80784617055688a85a1257a6b29dd337281be23ad70bb431bd4bddd37_s390x
Red Hat	network-observability/network-observability-rhel9-operator@sha256:d5ae40575fff6b91173d2ca9c05015e2a9a0134532d3ddeb78ba8a33eaf30515_ppc64le as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:d5ae40575fff6b91173d2ca9c05015e2a9a0134532d3ddeb78ba8a33eaf30515_ppc64le
Red Hat	network-observability/network-observability-operator-bundle@sha256:54265e4e7303a2360e93b08a562a6adb9ea56440ad5f44c9b17344215520a16a_ppc64le as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:54265e4e7303a2360e93b08a562a6adb9ea56440ad5f44c9b17344215520a16a_ppc64le
Red Hat	network-observability/network-observability-operator-bundle@sha256:e9e9c7032c1cb1c613fc7bde020b2f281d9509441f093754c55127cc54112d57_s390x as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:e9e9c7032c1cb1c613fc7bde020b2f281d9509441f093754c55127cc54112d57_s390x
Red Hat	network-observability/network-observability-rhel9-operator@sha256:61728634fb37058c60c0942103eaf64aded578d9d5fe3c2bac2d55d569b5a553_s390x as a component of NETOBSERV 1.5 for RHEL 9	*
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:0335cfa3eef8bd0a23af93c1dd0db1eb587b1e32ef3f6c634b6582655a73d47a_ppc64le as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-console-plugin-rhel9@sha256:0335cfa3eef8bd0a23af93c1dd0db1eb587b1e32ef3f6c634b6582655a73d47a_ppc64le
Red Hat	network-observability/network-observability-ebpf-agent-rhel9@sha256:9eb9f3de0debd6c29c44512b447d917a4439f552ac913763565d5011a5ea4bfb_amd64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-ebpf-agent-rhel9@sha256:9eb9f3de0debd6c29c44512b447d917a4439f552ac913763565d5011a5ea4bfb_amd64
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ceea44928d9c0a31ee2ace2b66c470666a3be9795921f3ca18e2c101025dab57_amd64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:ceea44928d9c0a31ee2ace2b66c470666a3be9795921f3ca18e2c101025dab57_amd64
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:089af8c30c1e0f417859fbd1ea2e2c789b1b2cc63e83ff36b7e8080197ea3f27_s390x as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-console-plugin-rhel9@sha256:089af8c30c1e0f417859fbd1ea2e2c789b1b2cc63e83ff36b7e8080197ea3f27_s390x
Red Hat	network-observability/network-observability-rhel9-operator@sha256:59e8c9627d5cd581a4d1a77d875a9754709bbb05a530b5893ee70460a9b8c7a2_amd64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:59e8c9627d5cd581a4d1a77d875a9754709bbb05a530b5893ee70460a9b8c7a2_amd64
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0e8486070198313ee1ec61bb515a2c2479ccefcd497d1e3d8deee66e05642db7_arm64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:0e8486070198313ee1ec61bb515a2c2479ccefcd497d1e3d8deee66e05642db7_arm64
Red Hat	network-observability/network-observability-operator-bundle@sha256:fc26b4d8bcba231af681b5b148572d31b91d1498621479926ee5f8ea5056702e_arm64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:fc26b4d8bcba231af681b5b148572d31b91d1498621479926ee5f8ea5056702e_arm64
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:200a01e89cfaab556fb22a4a01cc25df0746998c3d2cce6a6fc9d43cecb23490_arm64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-console-plugin-rhel9@sha256:200a01e89cfaab556fb22a4a01cc25df0746998c3d2cce6a6fc9d43cecb23490_arm64
Red Hat	network-observability/network-observability-operator-bundle@sha256:c97aff3b0ed506b2a1e34c1b22878dc42c6ef3ebf03b73147e8879e23ab5f8af_amd64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-operator-bundle@sha256:c97aff3b0ed506b2a1e34c1b22878dc42c6ef3ebf03b73147e8879e23ab5f8af_amd64
Red Hat	network-observability/network-observability-rhel9-operator@sha256:3f5bc47665e0ee6eb3a9d1f500e4592fb79c8fc42bcd11685f15f046906512fb_arm64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-rhel9-operator@sha256:3f5bc47665e0ee6eb3a9d1f500e4592fb79c8fc42bcd11685f15f046906512fb_arm64
Red Hat	network-observability/network-observability-console-plugin-rhel9@sha256:78d96d58fd232fee462a60a8fb71293e7cdbe93cb4437459497e87ff24f55ec3_amd64 as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-console-plugin-rhel9@sha256:78d96d58fd232fee462a60a8fb71293e7cdbe93cb4437459497e87ff24f55ec3_amd64
Red Hat	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:bfef12fb923f1d49daa1d0209834f89ae42455deb7576ccd7257deb6bb083f5f_s390x as a component of NETOBSERV 1.5 for RHEL 9	network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:bfef12fb923f1d49daa1d0209834f89ae42455deb7576ccd7257deb6bb083f5f_s390x