VDB
RHSA-2024%3A10988
RHSA-2024%3A10988
PUBLISHED
CVSS 8 HIGH
A flaw was found in DOMPurify that could allow for a nesting-based mXSS to not be properly sanitized.
Risk Scores
CVSS 3.1
8
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/logging-view-plugin-rhel8@sha256:2ef85a419f5c258d0d4a474cfc4b6595bb8ac0192a61a788229283c5f40e776b_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-view-plugin-rhel8@sha256:2ef85a419f5c258d0d4a474cfc4b6595bb8ac0192a61a788229283c5f40e776b_amd64 |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:1192ec065c0f370676f2ae985c48bec7a227cd2ad904b241b990e5edffebf4e7_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/fluentd-rhel8@sha256:1192ec065c0f370676f2ae985c48bec7a227cd2ad904b241b990e5edffebf4e7_ppc64le |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:07f8be119ffc987a1def8a352fd65333b6d91f89935b3540ae6af6f1f51b7c12_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/fluentd-rhel8@sha256:07f8be119ffc987a1def8a352fd65333b6d91f89935b3540ae6af6f1f51b7c12_arm64 |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:1333d71476a58eded72ffd77c12a26329f13b037dd49f073862d3a3eadce0f2d_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-proxy-rhel8@sha256:1333d71476a58eded72ffd77c12a26329f13b037dd49f073862d3a3eadce0f2d_amd64 |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:82346c7142795d09a6e6e057edcbe6af08481dd243e927970fac762ae43348ac_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:6cef416969162696d637aa40de200b5926eaa8cff07621392147fe338e40610e_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-rhel8-operator@sha256:6cef416969162696d637aa40de200b5926eaa8cff07621392147fe338e40610e_s390x |
| Red Hat | openshift-logging/vector-rhel8@sha256:769f184481ae8bb036297a9d627da22fdfae2880bc93ff0731a1caa16bde6174_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/vector-rhel8@sha256:769f184481ae8bb036297a9d627da22fdfae2880bc93ff0731a1caa16bde6174_arm64 |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:c935a5b7ac52794faa082ed4af1ad33023142649bced40ef68d9f3524a54c31c_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/cluster-logging-rhel8-operator@sha256:c935a5b7ac52794faa082ed4af1ad33023142649bced40ef68d9f3524a54c31c_arm64 |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:de38204f57c1248e04c88762e149aba5df0a5c9724629ad55a7e9cae4aa43a38_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-loki-rhel8@sha256:de38204f57c1248e04c88762e149aba5df0a5c9724629ad55a7e9cae4aa43a38_arm64 |
| Red Hat | openshift-logging/logging-view-plugin-rhel8@sha256:2414e3c9f341e04ab8df7ec67913eb1f48b5261a9922302ef08e6faf1d656667_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-view-plugin-rhel8@sha256:2414e3c9f341e04ab8df7ec67913eb1f48b5261a9922302ef08e6faf1d656667_s390x |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:ad09dff23d8ea0cdfec735667381fb6d337172b14a38ae62c162539d7a848898_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/eventrouter-rhel8@sha256:ad09dff23d8ea0cdfec735667381fb6d337172b14a38ae62c162539d7a848898_s390x |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:ff9b4417774e5c27cf8148f4021b59f01e26cd531bbbded9edfdd871bb39949d_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/loki-rhel8-operator@sha256:ff9b4417774e5c27cf8148f4021b59f01e26cd531bbbded9edfdd871bb39949d_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:83fde07cd0688abff5a6527e6fa76adab13d2c4db534c89955ef34b0ca706f43_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:cb2e78c47747712f91ea4623216993d26118cf729f8d8194a4d8cb6a20e681c9_amd64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:cb2e78c47747712f91ea4623216993d26118cf729f8d8194a4d8cb6a20e681c9_amd64 |
| Red Hat | openshift-logging/eventrouter-rhel8@sha256:e3d38f53d567c627332670412ac22b1ed860a72595959cb810b9f022ebf57371_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/eventrouter-rhel8@sha256:e3d38f53d567c627332670412ac22b1ed860a72595959cb810b9f022ebf57371_arm64 |
| Red Hat | openshift-logging/vector-rhel8@sha256:9dbb868330ce495c914c6b42c24fb79896ebb9f2392281f1571e65ea5ecf97ef_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:bd7a3c5ee7cd28b89dcf215818f7f10b360c1b91bda152a3169dd96c6c7d6f32_ppc64le as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:c633886066fc1a153b25fd2462cd7c0415127fbc081713acdec211f898484c32_ppc64le as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/vector-rhel8@sha256:3e152577d75d5b1cf75977f3ed078804575c0eeedb3132b85a0db4db5e5de45f_s390x as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:3024818a3ca77f5351877cc72924fdf824eba6defb4be080003d03334aba131c_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-proxy-rhel8@sha256:3024818a3ca77f5351877cc72924fdf824eba6defb4be080003d03334aba131c_s390x |
…and 43 more
Timeline
- Jan 15, 2025 CVE Published
- Apr 30, 2026 CVE Updated
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:10988 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2024_10988.json advisory
- https://access.redhat.com/security/cve/CVE-2024-47875 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2318052 issue
- https://www.cve.org/CVERecord?id=CVE-2024-47875 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-47875 advisory
- https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098 advisory
- https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f advisory
- https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a advisory
- https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf advisory