Vulnerabilidades do Red Hat Red Hat Ceph Storage 8.1
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat Red Hat Ceph Storage 8.1: 2 registro(s), com versões afetadas e correções.
CVE-2025-13033
Alta · 7.5
CWE-1286 14/11/2025
Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict
A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the email to the attacker's external address instead of the intended internal recipient. This could lead to a significant data leak of sensitive information and allow an attacker to bypass security filters and access controls.
CVE-2024-11831
Média · 5.4
CWE-79 10/02/2025
Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.