VDB
RHSA-2024%3A8981
RHSA-2024%3A8981
PUBLISHED
CVSS 7.5 HIGH
A vulnerability was found in the Axios HTTP Client. It is vulnerable to a server-side request forgery attack (SSRF) caused by unexpected behavior where requests for path-relative URLs get processed as protocol-relative URLs. This flaw allows an attacker to perform arbitrary requests from the server, potentially accessing internal systems or exfiltrating sensitive data.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-api-rhel9@sha256:981c79722ae481cfac16dbf108c44e5479747cea40a54b01ef608ca7a87aceab_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-api-rhel9@sha256:981c79722ae481cfac16dbf108c44e5479747cea40a54b01ef608ca7a87aceab_s390x |
| Red Hat | openshift4/ose-libvirt-machine-controllers-rhel9@sha256:05aa9e4e447b55aa68815f846ce1158a0da3a9919f4feca60d05d29a7bc29ea8_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ec27ba3879b27ab8b982acd1e83a33f48cc0afb95808f0d4ff22ba9fb7c620ba_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:ec27ba3879b27ab8b982acd1e83a33f48cc0afb95808f0d4ff22ba9fb7c620ba_s390x |
| Red Hat | openshift4/container-networking-plugins-microshift-rhel9@sha256:a02d5a21da44900b709e17831c15ce9bb567fdffaad51b508bfa8b7a401c2ad4_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/container-networking-plugins-microshift-rhel9@sha256:a02d5a21da44900b709e17831c15ce9bb567fdffaad51b508bfa8b7a401c2ad4_amd64 |
| Red Hat | openshift4/ose-deployer-rhel9@sha256:143c5463228d9829d397f496a0378e4a0b63d01b2c08b278415c5b8c417ce634_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-deployer-rhel9@sha256:143c5463228d9829d397f496a0378e4a0b63d01b2c08b278415c5b8c417ce634_s390x |
| Red Hat | openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:bc4778a9a266df31e98b8665ba90d0530fd4e8afc070a5ff333c8b61335d7d55_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | openshift4/ovirt-csi-driver-rhel9@sha256:1f10599c58ec3f4248471c924d3291f200610536db0d6f58328570b0397ca876_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ovirt-csi-driver-rhel9@sha256:1f10599c58ec3f4248471c924d3291f200610536db0d6f58328570b0397ca876_arm64 |
| Red Hat | openshift4/ose-cluster-etcd-rhel9-operator@sha256:8e84608900c38cc3f12831fa5572173d9c1339841ed315b33ad6961d9d5ecc36_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | openshift4/ose-configmap-reloader-rhel9@sha256:f3c45642de921e6e8c5fbcea072b0cc5d87fb350425d0f9f44cb8efeca11e7d0_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-configmap-reloader-rhel9@sha256:f3c45642de921e6e8c5fbcea072b0cc5d87fb350425d0f9f44cb8efeca11e7d0_arm64 |
| Red Hat | openshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:d8cda79c0e749369d27f03bfa8450e217f1547961e64ce82e0f1aadba44d7690_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-openshift-apiserver-rhel9-operator@sha256:d8cda79c0e749369d27f03bfa8450e217f1547961e64ce82e0f1aadba44d7690_arm64 |
| Red Hat | openshift4/ose-azure-cluster-api-controllers-rhel9@sha256:16a0859dfa51227202b071ed1d2dcab1b69e7e88cc749164c8201c74b4410417_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-azure-cluster-api-controllers-rhel9@sha256:16a0859dfa51227202b071ed1d2dcab1b69e7e88cc749164c8201c74b4410417_arm64 |
| Red Hat | openshift4/ose-configmap-reloader-rhel9@sha256:f3c45642de921e6e8c5fbcea072b0cc5d87fb350425d0f9f44cb8efeca11e7d0_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-configmap-reloader-rhel9@sha256:f3c45642de921e6e8c5fbcea072b0cc5d87fb350425d0f9f44cb8efeca11e7d0_arm64 |
| Red Hat | openshift4/ose-etcd-rhel9@sha256:453bda14a49dbb33181a74667e56c453ca659353c125cb79e03821cd95dc1d40_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-etcd-rhel9@sha256:453bda14a49dbb33181a74667e56c453ca659353c125cb79e03821cd95dc1d40_s390x |
| Red Hat | openshift4/ose-operator-marketplace-rhel9@sha256:ba44eafdfbec2cd36ce4a8c8749bd396a98202a53345ba7fd4b897b7565869c5_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-operator-marketplace-rhel9@sha256:ba44eafdfbec2cd36ce4a8c8749bd396a98202a53345ba7fd4b897b7565869c5_amd64 |
| Red Hat | openshift4/ose-prometheus-operator-admission-webhook-rhel9@sha256:adc1782f98db9588bf88e07ea6a9443c814d474f260e54cb7a484e90fa4ff943_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-prometheus-operator-admission-webhook-rhel9@sha256:adc1782f98db9588bf88e07ea6a9443c814d474f260e54cb7a484e90fa4ff943_s390x |
| Red Hat | openshift4/ose-container-networking-plugins-rhel9@sha256:2e5f5cb811843ef972f35d3ad7aa6db2c25e780e1731cb745211cb795144ff7c_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | openshift4/ose-tests-rhel9@sha256:b85e923f58ceb308d3ee7beac3e056c8ab9bf15d47089525364bab18140e0045_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | openshift4/kubevirt-csi-driver-rhel9@sha256:386afd388461e5ff8d3ee7787029c217cba52729c521795be77fe6cbf799d2da_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel9@sha256:fe21b387047ae925b03c51f923b7f8132474391d649558184d1bfaea7f5a6de4_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | openshift4/oc-mirror-plugin-rhel9@sha256:81413f77bb0e85ec028b4c6c09d9b35ea607c69e13b3ec22cce0fb79f3212434_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/oc-mirror-plugin-rhel9@sha256:81413f77bb0e85ec028b4c6c09d9b35ea607c69e13b3ec22cce0fb79f3212434_amd64 |
…and 1304 more
Timeline
- Nov 13, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8981 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2318052 issue
- https://issues.redhat.com/browse/OCPBUGS-41642 advisory
- https://issues.redhat.com/browse/OCPBUGS-42115 advisory
- https://issues.redhat.com/browse/OCPBUGS-42386 advisory
- https://issues.redhat.com/browse/OCPBUGS-42577 advisory
- https://issues.redhat.com/browse/OCPBUGS-42605 advisory
- https://issues.redhat.com/browse/OCPBUGS-43037 advisory
- https://issues.redhat.com/browse/OCPBUGS-43065 advisory
- https://issues.redhat.com/browse/OCPBUGS-43103 advisory
- https://issues.redhat.com/browse/OCPBUGS-43277 advisory
- https://issues.redhat.com/browse/OCPBUGS-43564 advisory
- https://issues.redhat.com/browse/OCPBUGS-43566 advisory
- https://issues.redhat.com/browse/OCPBUGS-43586 advisory
- https://issues.redhat.com/browse/OCPBUGS-43587 advisory
- https://issues.redhat.com/browse/OCPBUGS-43644 advisory
- https://issues.redhat.com/browse/OCPBUGS-43696 advisory
- https://issues.redhat.com/browse/OCPBUGS-43719 advisory
- https://issues.redhat.com/browse/OCPBUGS-43746 advisory
…and 30 more