Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-11831

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

serialize-javascript

  • 6.0 to < 6.0.2affected

Red Hat Red Hat Advanced Cluster Security 4.4

Default version status: affected

  • 4.4.8-2 to < *unaffected

Red Hat Red Hat Advanced Cluster Security 4.5

Default version status: affected

  • 4.5.6-2 to < *unaffected

Red Hat Red Hat Ceph Storage 7.1

Default version status: affected

  • 2:18.2.1-381.el8cp to < *unaffected

Red Hat Red Hat Ceph Storage 8.1

Default version status: affected

  • 2:19.2.1-292.el9cp to < *unaffected

Red Hat Red Hat Ceph Storage 9.0

Default version status: affected

  • 2:20.1.0-144.el10cp to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:8.0.112-1.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:8.0.112-1.el9_5 to < *unaffected

Red Hat RHODF-4.14-RHEL-9

Default version status: affected

  • v4.14.18-2 to < *unaffected

Red Hat RHODF-4.14-RHEL-9

Default version status: affected

  • v4.14.18-3 to < *unaffected

Red Hat RHODF-4.14-RHEL-9

Default version status: affected

  • v4.14.18-2 to < *unaffected

Red Hat RHODF-4.15-RHEL-9

Default version status: affected

  • v4.15.14-2 to < *unaffected

Red Hat RHODF-4.15-RHEL-9

Default version status: affected

  • v4.15.14-2 to < *unaffected

Red Hat RHODF-4.15-RHEL-9

Default version status: affected

  • v4.15.14-2 to < *unaffected

Red Hat RHODF-4.16-RHEL-9

Default version status: affected

  • v4.16.10-4 to < *unaffected

Red Hat RHODF-4.16-RHEL-9

Default version status: affected

  • v4.16.10-4 to < *unaffected

Red Hat RHODF-4.16-RHEL-9

Default version status: affected

  • v4.16.10-3 to < *unaffected

Red Hat RHODF-4.17-RHEL-9

Default version status: affected

  • v4.17.7-2 to < *unaffected

Red Hat RHODF-4.17-RHEL-9

Default version status: affected

  • v4.17.7-2 to < *unaffected

Red Hat RHODF-4.17-RHEL-9

Default version status: affected

  • v4.17.7-2 to < *unaffected

Red Hat RHODF-4.18-RHEL-9

Default version status: affected

  • v4.18.2-8 to < *unaffected

Red Hat RHODF-4.18-RHEL-9

Default version status: affected

  • v4.18.2-7 to < *unaffected

Red Hat RHODF-4.18-RHEL-9

Default version status: affected

  • v4.18.2-8 to < *unaffected

Red Hat Red Hat Ceph Storage 7.1

Default version status: affected

  • 1791452477 to < *unaffected

Red Hat Red Hat Ceph Storage 8

Default version status: affected

  • 8 to < *unaffected

Red Hat Red Hat Ceph Storage 8.1

Default version status: affected

  • 1787550654 to < *unaffected

Red Hat Red Hat Ceph Storage 9.0

Default version status: affected

  • 1776359884 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.14.6

Default version status: affected

  • v1.14.6-1744143767 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.15

Default version status: affected

  • v1.15.3-1746939886 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.15

Default version status: affected

  • v1.15.3-1746936251 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.16

Default version status: affected

  • v1.16.4-1747983385 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.16

Default version status: affected

  • v1.16.4-1747979846 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.17

Default version status: affected

  • v1.17.2-1749452800 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.17

Default version status: affected

  • v1.17.2-1750066936 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.18.0

Default version status: affected

  • v1.18.1-1747749913 to < *unaffected

Red Hat Red Hat OpenShift Pipelines 1.19

Default version status: affected

  • v1.19.0-1752127853 to < *unaffected

Red Hat Cryostat 3

Default version status: affected

Red Hat Logging Subsystem for Red Hat OpenShift

Default version status: affected

Red Hat Migration Toolkit for Virtualization

Default version status: unaffected

Red Hat .NET 6.0 on Red Hat Enterprise Linux

Default version status: unknown

Red Hat OpenShift Lightspeed

Default version status: affected

Red Hat OpenShift Pipelines

Default version status: affected

Red Hat OpenShift Pipelines

Default version status: affected

Red Hat OpenShift Serverless

Default version status: affected

Red Hat OpenShift Service Mesh 2

Default version status: affected

Red Hat OpenShift Service Mesh 2

Default version status: affected

Red Hat Red Hat 3scale API Management Platform 2

Default version status: affected

Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

Default version status: unaffected

Red Hat Red Hat Advanced Cluster Security 4

Default version status: unaffected

Red Hat Red Hat Advanced Cluster Security 4

Default version status: unaffected

Red Hat Red Hat Advanced Cluster Security 4

Default version status: unaffected

Red Hat Red Hat Advanced Cluster Security 4

Default version status: unaffected

Red Hat Red Hat Advanced Cluster Security 4

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat build of Apache Camel - HawtIO 4

Default version status: unaffected

Red Hat Red Hat build of Apicurio Registry 2

Default version status: affected

Red Hat Red Hat build of OptaPlanner 8

Default version status: affected

Red Hat Red Hat Ceph Storage 7

Default version status: unaffected

Red Hat Red Hat Ceph Storage 7

Default version status: affected

Red Hat Red Hat Ceph Storage 7

Default version status: unaffected

Red Hat Red Hat Ceph Storage 8

Default version status: unaffected

Red Hat Red Hat Ceph Storage 8

Default version status: affected

Red Hat Red Hat Ceph Storage 8

Default version status: affected

Red Hat Red Hat Ceph Storage 9

Default version status: affected

Red Hat Red Hat Ceph Storage 9

Default version status: affected

Red Hat Red Hat Ceph Storage 9

Default version status: affected

Red Hat Red Hat Data Grid 8

Default version status: affected

Red Hat Red Hat Developer Hub 1

Default version status: unaffected

Red Hat Red Hat Discovery 1

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unknown

Red Hat Red Hat Enterprise Linux 9

Default version status: unknown

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Fuse 7

Default version status: affected

Red Hat Red Hat Integration Camel K 1

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 7

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: unaffected

Red Hat Red Hat OpenShift Container Platform 3.11

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: unaffected

Red Hat Red Hat OpenShift Dev Spaces

Default version status: unaffected

Red Hat Red Hat OpenShift Dev Spaces

Default version status: affected

Red Hat Red Hat OpenShift Dev Spaces

Default version status: unaffected

Red Hat Red Hat OpenShift distributed tracing 3

Default version status: unaffected

Red Hat Red Hat OpenShift distributed tracing 3

Default version status: affected

Red Hat Red Hat OpenShift distributed tracing 3

Default version status: unaffected

Red Hat Red Hat OpenShift distributed tracing 3

Default version status: unaffected

Red Hat Red Hat OpenShift distributed tracing 3

Default version status: unaffected

Red Hat Red Hat OpenShift distributed tracing 3

Default version status: unaffected

Red Hat Red Hat OpenShift distributed tracing 3

Default version status: affected

Red Hat Red Hat Process Automation 7

Default version status: affected

Red Hat Red Hat Quay 3

Default version status: affected

Red Hat Red Hat Satellite 6

Default version status: unaffected

Red Hat Red Hat Satellite 6

Default version status: unaffected

Red Hat Red Hat Single Sign-On 7

Default version status: affected

Red Hat Red Hat Trusted Profile Analyzer

Default version status: affected

References