Red Hat Data Grid is an in-memory, distributed NoSQL datastore solution. Versions prior to 8.5.2 are affected by two vulnerabilities: CVE-2024-47072, where the XStream library is vulnerable to a denial of service attack due to stack overflow triggered by a manipulated binary input stream; and CVE-2024-43788, a DOM Clobbering vulnerability in the webpack AutoPublicPathRuntimeModule. Red Hat has released Data Grid 8.5.2 to address these issues. The advisory rates the update as Important and recommends applying the update after ensuring all previous errata are applied.

The vulnerabilities could allow an attacker to cause a denial of service condition via stack overflow (CVE-2024-47072) and potentially exploit DOM Clobbering issues (CVE-2024-43788) in affected versions of Red Hat Data Grid. The advisory classifies the security impact as Important, indicating a significant but not critical risk. No known exploits in the wild have been reported at this time.

Red Hat has released version 8.5.2 of Red Hat Data Grid which includes fixes for these vulnerabilities. Users should update to version 8.5.2 after applying all previously released errata relevant to their system. No additional mitigation steps are indicated by the vendor advisory.