CERT24RHEA-2024:1366 — Red Hat Developer Hub 1.1 release and related vulnerabilitiesLoading data…
CERT24Threat Observatory
Period

RHEA-2024:1366 — Red Hat Developer Hub 1.1 release and related vulnerabilities

Red Hat’s enhancement advisory for the Red Hat Developer Hub 1.1 release describes several related vulnerabilities. These include improper URL handling, the HTTP/2 Rapid Reset attack, code execution and sensitive-information access through SSRF, cookie-header leakage, CSS-processing ReDoS, and an uncaught exception that may terminate the Node.js process.

← Back to intelligence

RHEA-2024:1366 — Red Hat Developer Hub 1.1 release and related vulnerabilities

Red Hat’s enhancement advisory for the Red Hat Developer Hub 1.1 release describes several related vulnerabilities. These include improper URL handling, the HTTP/2 Rapid Reset attack, code execution and sensitive-information access through SSRF, cookie-header leakage, CSS-processing ReDoS, and an uncaught exception that may terminate the Node.js process.