VDB
RHSA-2024%3A9629
RHSA-2024%3A9629
PUBLISHED
CVSS 8 HIGH
A flaw was found in DOMPurify that could allow for a nesting-based mXSS to not be properly sanitized.
Risk Scores
CVSS 3.1
8
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-service-mesh/proxyv2-rhel8@sha256:8581ad76cd8e4d17f36094bb65afffac23d47ecb5ade9590022466d44518bb59_s390x as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/proxyv2-rhel8@sha256:8581ad76cd8e4d17f36094bb65afffac23d47ecb5ade9590022466d44518bb59_s390x |
| Red Hat | openshift-service-mesh/istio-cni-rhel8@sha256:d1aaffdf2037c27e617ecbc5b7d332f064d0835798eddf00a61e09506cc163f4_ppc64le as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/istio-cni-rhel8@sha256:d1aaffdf2037c27e617ecbc5b7d332f064d0835798eddf00a61e09506cc163f4_ppc64le |
| Red Hat | openshift-service-mesh/kiali-rhel8@sha256:b9bc720b798b29639cc6563d64219ee19ff0b5f0ede40fe85df42db3333d2f8a_amd64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/kiali-rhel8@sha256:b9bc720b798b29639cc6563d64219ee19ff0b5f0ede40fe85df42db3333d2f8a_amd64 |
| Red Hat | openshift-service-mesh/istio-cni-rhel8@sha256:bcfe1c7fedf3ad05becc6feb4cc039e79ac8d96ba544e7d83a258208dea2a1c0_amd64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/istio-cni-rhel8@sha256:bcfe1c7fedf3ad05becc6feb4cc039e79ac8d96ba544e7d83a258208dea2a1c0_amd64 |
| Red Hat | openshift-service-mesh/istio-cni-rhel8@sha256:5b10adf74b4e38e9e7768d0e4178b6069e287a514118d2c01a547a82bf63bfc0_arm64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/istio-cni-rhel8@sha256:5b10adf74b4e38e9e7768d0e4178b6069e287a514118d2c01a547a82bf63bfc0_arm64 |
| Red Hat | openshift-service-mesh/pilot-rhel8@sha256:fa1eb737072defb020f05061805a5c962b869bc34db82971a387958f1fb125af_ppc64le as a component of RHOSSM 2.5 for RHEL 8 | * |
| Red Hat | openshift-service-mesh/istio-must-gather-rhel8@sha256:4dbc9af138b09394f5b0e980f5844dd852dfa269f56061adbd6c071badbb3e7f_arm64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/istio-must-gather-rhel8@sha256:4dbc9af138b09394f5b0e980f5844dd852dfa269f56061adbd6c071badbb3e7f_arm64 |
| Red Hat | openshift-service-mesh/grafana-rhel8@sha256:a540e7caea480f08a45b568d77143632f9037748d41f2e404acadb3e1c69993a_s390x as a component of RHOSSM 2.5 for RHEL 8 | * |
| Red Hat | openshift-service-mesh/pilot-rhel8@sha256:ffe5602bd1e2c9c2ad354f262cb130a89c11a0b48390155b7a7a670b16dbd9c3_arm64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/pilot-rhel8@sha256:ffe5602bd1e2c9c2ad354f262cb130a89c11a0b48390155b7a7a670b16dbd9c3_arm64 |
| Red Hat | openshift-service-mesh/istio-cni-rhel8@sha256:2349b52f0eb89c430acac4652e16f6f87ccfdf729a2842c78e1d341289967cbd_s390x as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/istio-cni-rhel8@sha256:2349b52f0eb89c430acac4652e16f6f87ccfdf729a2842c78e1d341289967cbd_s390x |
| Red Hat | openshift-service-mesh/proxyv2-rhel8@sha256:9d111abdce8928192a104a0fa4818f060aca5012c8c5107ff0fc489a594a16be_amd64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/proxyv2-rhel8@sha256:9d111abdce8928192a104a0fa4818f060aca5012c8c5107ff0fc489a594a16be_amd64 |
| Red Hat | openshift-service-mesh/kiali-rhel8@sha256:44ecbaac3a9f293c395a8bcf61bc09491934d425d0bc999afaca8f0a7f0225e7_arm64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/kiali-rhel8@sha256:44ecbaac3a9f293c395a8bcf61bc09491934d425d0bc999afaca8f0a7f0225e7_arm64 |
| Red Hat | openshift-service-mesh/kiali-ossmc-rhel8@sha256:ba29942848135ede7214bd53ada5f4f27c2245c3832b26916f55f623ef5e0281_s390x as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/kiali-ossmc-rhel8@sha256:ba29942848135ede7214bd53ada5f4f27c2245c3832b26916f55f623ef5e0281_s390x |
| Red Hat | openshift-service-mesh/ratelimit-rhel8@sha256:403318fb7177877f1a7075a76803b56d159cb6866a71c486c3d60de0eac73ea6_s390x as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/ratelimit-rhel8@sha256:403318fb7177877f1a7075a76803b56d159cb6866a71c486c3d60de0eac73ea6_s390x |
| Red Hat | openshift-service-mesh/ratelimit-rhel8@sha256:d7ba12eafd54c65fdd14a448d5fb5081a40c264911b39de3efc7b66ef0226ab3_ppc64le as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/ratelimit-rhel8@sha256:d7ba12eafd54c65fdd14a448d5fb5081a40c264911b39de3efc7b66ef0226ab3_ppc64le |
| Red Hat | openshift-service-mesh/ratelimit-rhel8@sha256:4ca99e4ff0e5af748b818c93716e7172926d2552f80694aa0f1a9e0384f355d2_arm64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/ratelimit-rhel8@sha256:4ca99e4ff0e5af748b818c93716e7172926d2552f80694aa0f1a9e0384f355d2_arm64 |
| Red Hat | openshift-service-mesh/grafana-rhel8@sha256:20c5729df345672654e0451e0cbcfbe863805fb5bb28b18cfaf3535c58e30089_arm64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/grafana-rhel8@sha256:20c5729df345672654e0451e0cbcfbe863805fb5bb28b18cfaf3535c58e30089_arm64 |
| Red Hat | openshift-service-mesh/pilot-rhel8@sha256:9b975fe879ed990ff410a2cc72a6f1d7e49d63a86d5b4e90bf48eb6f6172d32d_s390x as a component of RHOSSM 2.5 for RHEL 8 | * |
| Red Hat | openshift-service-mesh/pilot-rhel8@sha256:23caccd0e422ac4b59397aa6d7a028f4df8a61488b7ea339d81cb8ac432c3716_amd64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/pilot-rhel8@sha256:23caccd0e422ac4b59397aa6d7a028f4df8a61488b7ea339d81cb8ac432c3716_amd64 |
| Red Hat | openshift-service-mesh/grafana-rhel8@sha256:fddfbc8eb02901993de6b1e2e3ff300f2ed655e880913198db9625dd2bb2d901_amd64 as a component of RHOSSM 2.5 for RHEL 8 | openshift-service-mesh/grafana-rhel8@sha256:fddfbc8eb02901993de6b1e2e3ff300f2ed655e880913198db9625dd2bb2d901_amd64 |
…and 12 more
Timeline
- Nov 14, 2024 CVE Published
- Apr 30, 2026 CVE Updated
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Distribution Patch
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:9629 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2318052 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9629.json advisory
- https://access.redhat.com/security/cve/CVE-2024-47875 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-47875 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-47875 advisory
- https://github.com/cure53/DOMPurify/blob/0ef5e537a514f904b6aa1d7ad9e749e365d7185f/test/test-suite.js#L2098 advisory
- https://github.com/cure53/DOMPurify/commit/0ef5e537a514f904b6aa1d7ad9e749e365d7185f advisory
- https://github.com/cure53/DOMPurify/commit/6ea80cd8b47640c20f2f230c7920b1f4ce4fdf7a advisory
- https://github.com/cure53/DOMPurify/security/advisories/GHSA-gx9m-whjm-85jf advisory