Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.6.27
A high severity cross-site scripting (XSS) vulnerability (CVE-2024-47875) affecting the Logging subsystem for Red Hat OpenShift versions 5.6.27 and 5.8.16 has been identified. This vulnerability involves a nesting-based mutation issue in the dompurify library. Red Hat has released security advisories and updated container images and packages to address this issue. Users of Red Hat OpenShift Container Platform 4.16 and 4.13 are advised to upgrade to the fixed versions as per the official guidance to mitigate this vulnerability.
AI Analysis
Technical Summary
CVE-2024-47875 is a nesting-based mutation cross-site scripting (XSS) vulnerability in the dompurify library component used within the Logging subsystem of Red Hat OpenShift. This vulnerability is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation). Red Hat has released security advisories (RHSA-2025:0329 and RHSA-2024:8683) detailing the issue and providing updated container images and packages that fix the vulnerability. The advisories include instructions for upgrading affected OpenShift Logging versions (5.6.27, 5.8.16) and OpenShift Container Platform 4.16.20. The vulnerability is rated as high severity by Red Hat, but no known exploits in the wild have been reported.
Potential Impact
Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the affected OpenShift Logging components, potentially leading to unauthorized actions or data exposure within the affected environment. The issue affects the logging subsystem, which is critical for monitoring and auditing cluster activity. However, no active exploitation has been reported to date.
Mitigation Recommendations
Red Hat has released official fixes for this vulnerability in OpenShift Logging versions 5.8.16 and OpenShift Container Platform 4.16.20. Users should apply these updates promptly following the vendor's documented upgrade instructions. For OpenShift Container Platform 4.16, use the OpenShift CLI or web console to upgrade to the patched release. For OpenShift Logging 5.8, follow the cluster logging upgrade documentation. No additional mitigation steps are required beyond applying the official patches.
Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.6.27
Description
A high severity cross-site scripting (XSS) vulnerability (CVE-2024-47875) affecting the Logging subsystem for Red Hat OpenShift versions 5.6.27 and 5.8.16 has been identified. This vulnerability involves a nesting-based mutation issue in the dompurify library. Red Hat has released security advisories and updated container images and packages to address this issue. Users of Red Hat OpenShift Container Platform 4.16 and 4.13 are advised to upgrade to the fixed versions as per the official guidance to mitigate this vulnerability.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-47875 is a nesting-based mutation cross-site scripting (XSS) vulnerability in the dompurify library component used within the Logging subsystem of Red Hat OpenShift. This vulnerability is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation). Red Hat has released security advisories (RHSA-2025:0329 and RHSA-2024:8683) detailing the issue and providing updated container images and packages that fix the vulnerability. The advisories include instructions for upgrading affected OpenShift Logging versions (5.6.27, 5.8.16) and OpenShift Container Platform 4.16.20. The vulnerability is rated as high severity by Red Hat, but no known exploits in the wild have been reported.
Potential Impact
Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the affected OpenShift Logging components, potentially leading to unauthorized actions or data exposure within the affected environment. The issue affects the logging subsystem, which is critical for monitoring and auditing cluster activity. However, no active exploitation has been reported to date.
Mitigation Recommendations
Red Hat has released official fixes for this vulnerability in OpenShift Logging versions 5.8.16 and OpenShift Container Platform 4.16.20. Users should apply these updates promptly following the vendor's documented upgrade instructions. For OpenShift Container Platform 4.16, use the OpenShift CLI or web console to upgrade to the patched release. For OpenShift Logging 5.8, follow the cluster logging upgrade documentation. No additional mitigation steps are required beyond applying the official patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:0329
- Cve Count
- 1
Threat ID: 6a23404be29bf47b50c74594
Added to database: 06/05/2026, 21:31:55 UTC
Last enriched: 08/17/2026, 17:25:35 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 164
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.