Red Hat Security Advisory: Red Hat Data Grid 8.5.0 security update
Red Hat Data Grid is an in-memory, distributed, NoSQL datastore solution. It increases application response times and allows for dramatically improving performance while providing availability, reliability, and elastic scale. Data Grid 8.5.0 replaces Data Grid 8.4.8 and includes bug fixes and enhancements. Find out more about Data Grid 8.5.0 in the Release Notes[3]. Security Fix(es): * CVE-2024-29180 webpack-dev-middleware: lack of URL validation may lead to file leak [jdg-8] (CVE-2024-29180) * CVE-2024-29025 netty-codec-http: Allocation of Resources Without Limits or Throttling [jdg-8] (CVE-2024-29025) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
Red Hat Data Grid is an in-memory distributed NoSQL datastore designed for high performance and scalability. The security update to version 8.5.0 fixes two vulnerabilities: CVE-2024-29180, a lack of URL validation in webpack-dev-middleware that can lead to file leak, and CVE-2024-29025, an issue in netty-codec-http where resource allocation occurs without limits or throttling, potentially leading to resource exhaustion. These vulnerabilities affect Red Hat JBoss Data Grid 8 prior to 8.5.0. The advisory does not provide CVSS scores but classifies the impact as Important. The update replaces version 8.4.8 and includes other bug fixes and enhancements.
Potential Impact
The vulnerabilities could allow unauthorized file leaks due to insufficient URL validation and potential resource exhaustion due to unbounded resource allocation. These issues may degrade system reliability and availability. The advisory classifies the impact as Important, indicating a significant security concern but does not provide detailed CVSS metrics or confirmed exploitation in the wild.
Mitigation Recommendations
A security update to Red Hat Data Grid 8.5.0 is available that addresses these vulnerabilities. Users should apply this update after ensuring all previously released relevant errata have been applied. Refer to Red Hat's official update documentation for detailed instructions. No additional mitigations are specified or required beyond applying the update.
Red Hat Security Advisory: Red Hat Data Grid 8.5.0 security update
Description
Red Hat Data Grid is an in-memory, distributed, NoSQL datastore solution. It increases application response times and allows for dramatically improving performance while providing availability, reliability, and elastic scale. Data Grid 8.5.0 replaces Data Grid 8.4.8 and includes bug fixes and enhancements. Find out more about Data Grid 8.5.0 in the Release Notes[3]. Security Fix(es): * CVE-2024-29180 webpack-dev-middleware: lack of URL validation may lead to file leak [jdg-8] (CVE-2024-29180) * CVE-2024-29025 netty-codec-http: Allocation of Resources Without Limits or Throttling [jdg-8] (CVE-2024-29025) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Data Grid is an in-memory distributed NoSQL datastore designed for high performance and scalability. The security update to version 8.5.0 fixes two vulnerabilities: CVE-2024-29180, a lack of URL validation in webpack-dev-middleware that can lead to file leak, and CVE-2024-29025, an issue in netty-codec-http where resource allocation occurs without limits or throttling, potentially leading to resource exhaustion. These vulnerabilities affect Red Hat JBoss Data Grid 8 prior to 8.5.0. The advisory does not provide CVSS scores but classifies the impact as Important. The update replaces version 8.4.8 and includes other bug fixes and enhancements.
Potential Impact
The vulnerabilities could allow unauthorized file leaks due to insufficient URL validation and potential resource exhaustion due to unbounded resource allocation. These issues may degrade system reliability and availability. The advisory classifies the impact as Important, indicating a significant security concern but does not provide detailed CVSS metrics or confirmed exploitation in the wild.
Mitigation Recommendations
A security update to Red Hat Data Grid 8.5.0 is available that addresses these vulnerabilities. Users should apply this update after ensuring all previously released relevant errata have been applied. Refer to Red Hat's official update documentation for detailed instructions. No additional mitigations are specified or required beyond applying the update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:4460
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-29180"]
- Cvss Version
- null
Threat ID: 6a1df669e29bf47b50462142
Added to database: 06/01/2026, 21:15:21 UTC
Last enriched: 06/29/2026, 00:06:42 UTC
Last updated: 07/14/2026, 20:23:33 UTC
Views: 96
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.