VDB

RHSA-2024%3A1946

RHSA-2024%3A1946 PUBLISHED CVSS 6.099999904632568 MEDIUM

An Improper Input Validation flaw was found in follow-redirects due to the improper handling of URLs by the url.parse() function. When a new URL() throws an error, it can be manipulated to misinterpret the hostname. This issue could allow an attacker to redirect traffic to a malicious site, potentially leading to information disclosure, phishing attacks, or other security breaches.

Risk Scores

CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Red Hatopenshift-service-mesh/pilot-rhel8@sha256:c3ba2b9acfe888f8546ea31a1d6b33759be7305c6be40a0471da03a811a733aa_ppc64le as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/pilot-rhel8@sha256:c3ba2b9acfe888f8546ea31a1d6b33759be7305c6be40a0471da03a811a733aa_ppc64le, *, *
Red Hatopenshift-service-mesh/istio-cni-rhel8@sha256:d0122af40529339e7f1b2184a94c288ed3c8b731a84f7f3cc4e8ac0dcf8d8106_arm64 as a component of RHOSSM 2.5 for RHEL 8*, *, *
Red Hatopenshift-service-mesh/istio-must-gather-rhel8@sha256:ddf99768023aaa4f60e43a16f9d9aa44adb91d68307f020b1dfdd92a5c11fc91_arm64 as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/istio-must-gather-rhel8@sha256:ddf99768023aaa4f60e43a16f9d9aa44adb91d68307f020b1dfdd92a5c11fc91_arm64, *, *
Red Hatopenshift-service-mesh/pilot-rhel8@sha256:b112030a03913f52d0daead03020c597bb33287fb62f781ff00077d6664f9b33_arm64 as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/pilot-rhel8@sha256:b112030a03913f52d0daead03020c597bb33287fb62f781ff00077d6664f9b33_arm64, openshift-service-mesh/pilot-rhel8@sha256:b112030a03913f52d0daead03020c597bb33287fb62f781ff00077d6664f9b33_arm64, openshift-service-mesh/pilot-rhel8@sha256:b112030a03913f52d0daead03020c597bb33287fb62f781ff00077d6664f9b33_arm64
Red Hatopenshift-service-mesh/istio-must-gather-rhel8@sha256:c3fb0c75bc4c1915e570dc6e68e6a0dd38b05157e905e3a0bbe0fb83abd2b6fd_s390x as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/istio-must-gather-rhel8@sha256:c3fb0c75bc4c1915e570dc6e68e6a0dd38b05157e905e3a0bbe0fb83abd2b6fd_s390x, openshift-service-mesh/istio-must-gather-rhel8@sha256:c3fb0c75bc4c1915e570dc6e68e6a0dd38b05157e905e3a0bbe0fb83abd2b6fd_s390x, openshift-service-mesh/istio-must-gather-rhel8@sha256:c3fb0c75bc4c1915e570dc6e68e6a0dd38b05157e905e3a0bbe0fb83abd2b6fd_s390x
Red Hatopenshift-service-mesh/kiali-rhel8-operator@sha256:07d52f116218cbfaead1559ad84e63450cedbc79823e15e3e37650090dded17e_s390x as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/kiali-rhel8-operator@sha256:07d52f116218cbfaead1559ad84e63450cedbc79823e15e3e37650090dded17e_s390x, *, openshift-service-mesh/kiali-rhel8-operator@sha256:07d52f116218cbfaead1559ad84e63450cedbc79823e15e3e37650090dded17e_s390x
Red Hatopenshift-service-mesh/grafana-rhel8@sha256:ad8da9f3b2ca43d37c25e6ac37670cfaa2e98a8d6088fccadd37e836660020e2_ppc64le as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/grafana-rhel8@sha256:ad8da9f3b2ca43d37c25e6ac37670cfaa2e98a8d6088fccadd37e836660020e2_ppc64le, openshift-service-mesh/grafana-rhel8@sha256:ad8da9f3b2ca43d37c25e6ac37670cfaa2e98a8d6088fccadd37e836660020e2_ppc64le, openshift-service-mesh/grafana-rhel8@sha256:ad8da9f3b2ca43d37c25e6ac37670cfaa2e98a8d6088fccadd37e836660020e2_ppc64le
Red Hatopenshift-service-mesh/kiali-rhel8-operator@sha256:326b45f0d46bd99aa22404ff9634dabefb559c68271808a2607581e6c2d73f42_ppc64le as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/kiali-rhel8-operator@sha256:326b45f0d46bd99aa22404ff9634dabefb559c68271808a2607581e6c2d73f42_ppc64le, *, *
Red Hatopenshift-service-mesh/grafana-rhel8@sha256:58b025688bca67cb9de2e97a34813d59c398b8c5aa06cb11cd63c79b322f07a7_s390x as a component of RHOSSM 2.5 for RHEL 8*, *, openshift-service-mesh/grafana-rhel8@sha256:58b025688bca67cb9de2e97a34813d59c398b8c5aa06cb11cd63c79b322f07a7_s390x
Red Hatopenshift-service-mesh/proxyv2-rhel8@sha256:cfff7a32024d0c66f1e47d6282e251c3750b8b15dfa74d098936da02a6306145_arm64 as a component of RHOSSM 2.5 for RHEL 8*, openshift-service-mesh/proxyv2-rhel8@sha256:cfff7a32024d0c66f1e47d6282e251c3750b8b15dfa74d098936da02a6306145_arm64, openshift-service-mesh/proxyv2-rhel8@sha256:cfff7a32024d0c66f1e47d6282e251c3750b8b15dfa74d098936da02a6306145_arm64
Red Hatopenshift-service-mesh/ratelimit-rhel8@sha256:e8334544cb16db92bc8affad46e0abc11e1803d998b19991e885220584f2b9fe_amd64 as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/ratelimit-rhel8@sha256:e8334544cb16db92bc8affad46e0abc11e1803d998b19991e885220584f2b9fe_amd64, openshift-service-mesh/ratelimit-rhel8@sha256:e8334544cb16db92bc8affad46e0abc11e1803d998b19991e885220584f2b9fe_amd64, openshift-service-mesh/ratelimit-rhel8@sha256:e8334544cb16db92bc8affad46e0abc11e1803d998b19991e885220584f2b9fe_amd64
Red Hatopenshift-service-mesh/kiali-rhel8-operator@sha256:07d52f116218cbfaead1559ad84e63450cedbc79823e15e3e37650090dded17e_s390x as a component of RHOSSM 2.5 for RHEL 8*, openshift-service-mesh/kiali-rhel8-operator@sha256:07d52f116218cbfaead1559ad84e63450cedbc79823e15e3e37650090dded17e_s390x, openshift-service-mesh/kiali-rhel8-operator@sha256:07d52f116218cbfaead1559ad84e63450cedbc79823e15e3e37650090dded17e_s390x
Red Hatopenshift-service-mesh/kiali-ossmc-rhel8@sha256:632422660922698f9662c067e4662175a0207c1a38e7ee83ac4e6186de68890b_s390x as a component of RHOSSM 2.5 for RHEL 8*, *, *
Red Hatopenshift-service-mesh/kiali-ossmc-rhel8@sha256:efeed94b8d1b84224310469a6e4be5d8db055e3f8c4e06529ba20f3e7697c955_amd64 as a component of RHOSSM 2.5 for RHEL 8*, openshift-service-mesh/kiali-ossmc-rhel8@sha256:efeed94b8d1b84224310469a6e4be5d8db055e3f8c4e06529ba20f3e7697c955_amd64, *
Red Hatopenshift-service-mesh/istio-cni-rhel8@sha256:d0122af40529339e7f1b2184a94c288ed3c8b731a84f7f3cc4e8ac0dcf8d8106_arm64 as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/istio-cni-rhel8@sha256:d0122af40529339e7f1b2184a94c288ed3c8b731a84f7f3cc4e8ac0dcf8d8106_arm64, *, openshift-service-mesh/istio-cni-rhel8@sha256:d0122af40529339e7f1b2184a94c288ed3c8b731a84f7f3cc4e8ac0dcf8d8106_arm64
Red Hatopenshift-service-mesh/kiali-ossmc-rhel8@sha256:632422660922698f9662c067e4662175a0207c1a38e7ee83ac4e6186de68890b_s390x as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/kiali-ossmc-rhel8@sha256:632422660922698f9662c067e4662175a0207c1a38e7ee83ac4e6186de68890b_s390x, *, *
Red Hatopenshift-service-mesh/kiali-rhel8@sha256:d885ebb70409569cf8dd77fe482e7cb46d7ca8e901e54b59bce4699216dcbd94_amd64 as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/kiali-rhel8@sha256:d885ebb70409569cf8dd77fe482e7cb46d7ca8e901e54b59bce4699216dcbd94_amd64, openshift-service-mesh/kiali-rhel8@sha256:d885ebb70409569cf8dd77fe482e7cb46d7ca8e901e54b59bce4699216dcbd94_amd64, *
Red Hatopenshift-service-mesh/istio-rhel8-operator@sha256:1690eafb1f67ea903775f66cba1c9de4275a1e70f5a985940ddcb1577348045e_s390x as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/istio-rhel8-operator@sha256:1690eafb1f67ea903775f66cba1c9de4275a1e70f5a985940ddcb1577348045e_s390x, openshift-service-mesh/istio-rhel8-operator@sha256:1690eafb1f67ea903775f66cba1c9de4275a1e70f5a985940ddcb1577348045e_s390x, *
Red Hatopenshift-service-mesh/istio-cni-rhel8@sha256:caac8c5c9753bdbd97a52295a6a836f463c21cd1bf438173575dc4db006dab55_amd64 as a component of RHOSSM 2.5 for RHEL 8openshift-service-mesh/istio-cni-rhel8@sha256:caac8c5c9753bdbd97a52295a6a836f463c21cd1bf438173575dc4db006dab55_amd64, openshift-service-mesh/istio-cni-rhel8@sha256:caac8c5c9753bdbd97a52295a6a836f463c21cd1bf438173575dc4db006dab55_amd64, openshift-service-mesh/istio-cni-rhel8@sha256:caac8c5c9753bdbd97a52295a6a836f463c21cd1bf438173575dc4db006dab55_amd64
Red Hatopenshift-service-mesh/pilot-rhel8@sha256:b112030a03913f52d0daead03020c597bb33287fb62f781ff00077d6664f9b33_arm64 as a component of RHOSSM 2.5 for RHEL 8*, *, openshift-service-mesh/pilot-rhel8@sha256:b112030a03913f52d0daead03020c597bb33287fb62f781ff00077d6664f9b33_arm64

…and 60 more

Timeline

  • Apr 22, 2024 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • May 16, 2026 CVE Updated

References

…and 19 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›