CVE-2024-45801 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-45801 Interim 1 1 2025-02-18T00:28:02Z current 2025-02-18T00:28:02Z 2025-02-18T00:28:02Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-45801 DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking added to DOMPurify in recent releases. It was also possible to use Prototype Pollution to weaken the depth check. This renders dompurify unable to avoid cross site scripting (XSS) attacks. This issue has been addressed in versions 2.5.4 and 3.1.3 of DOMPurify. All users are advised to upgrade. There are no known workarounds for this vulnerability. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2025-February/038434.html E-Mail link for SUSE-RU-2025:0523-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 branch-network-formula-0.1.1728559936.c16d4fb-150600.3.3.3 cobbler-3.3.3-150600.5.11.3 locale-formula-0.4.0-150600.3.3.3 pxe-formula-0.3.0-150600.3.3.3 python3-spacewalk-client-tools-5.0.8-150600.4.6.3 release-notes-susemanager-5.0.3-150600.11.24.1 release-notes-susemanager-proxy-5.0.3-150600.11.20.1 saltboot-formula-0.1.1728559936.c16d4fb-150600.3.3.3 spacecmd-5.0.11-150600.4.9.3 spacewalk-backend-5.0.11-150600.4.9.5 spacewalk-backend-app-5.0.11-150600.4.9.5 spacewalk-backend-iss-5.0.11-150600.4.9.5 spacewalk-backend-iss-export-5.0.11-150600.4.9.5 spacewalk-backend-package-push-server-5.0.11-150600.4.9.5 spacewalk-backend-server-5.0.11-150600.4.9.5 spacewalk-backend-sql-5.0.11-150600.4.9.5 spacewalk-backend-sql-postgresql-5.0.11-150600.4.9.5 spacewalk-backend-tools-5.0.11-150600.4.9.5 spacewalk-backend-xml-export-libs-5.0.11-150600.4.9.5 spacewalk-backend-xmlrpc-5.0.11-150600.4.9.5 spacewalk-base-5.0.16-150600.3.13.5 spacewalk-base-minimal-5.0.16-150600.3.13.5 spacewalk-base-minimal-config-5.0.16-150600.3.13.5 spacewalk-client-tools-5.0.8-150600.4.6.3 spacewalk-config-5.0.5-150600.3.6.3 spacewalk-html-5.0.16-150600.3.13.5 spacewalk-java-5.0.19-150600.3.14.4 spacewalk-java-config-5.0.19-150600.3.14.4 spacewalk-java-lib-5.0.19-150600.3.14.4 spacewalk-java-postgresql-5.0.19-150600.3.14.4 spacewalk-proxy-broker-5.0.5-150600.3.6.3 spacewalk-proxy-common-5.0.5-150600.3.6.3 spacewalk-proxy-package-manager-5.0.5-150600.3.6.3 spacewalk-proxy-redirect-5.0.5-150600.3.6.3 spacewalk-search-5.0.3-150600.3.3.3 spacewalk-setup-5.0.7-150600.3.6.3 spacewalk-taskomatic-5.0.19-150600.3.14.4 spacewalk-utils-5.0.6-150600.3.6.3 supportutils-plugin-salt-1.2.3-150600.4.3.3 supportutils-plugin-susemanager-5.0.5-150600.3.6.3 susemanager-5.0.11-150600.3.9.3 susemanager-build-keys-15.5.3-150600.5.6.3 susemanager-build-keys-web-15.5.3-150600.5.6.3 susemanager-docs_en-5.0.3-150600.11.9.3 susemanager-docs_en-pdf-5.0.3-150600.11.9.3 susemanager-schema-5.0.13-150600.3.9.3 susemanager-schema-utility-5.0.13-150600.3.9.3 susemanager-sls-5.0.12-150600.3.9.3 susemanager-sync-data-5.0.9-150600.3.11.3 susemanager-tools-5.0.11-150600.3.9.3 uyuni-coco-attestation-core-5.0.6-150600.3.6.3 uyuni-coco-attestation-module-secureboot-5.0.6-150600.3.6.3 uyuni-coco-attestation-module-snpguest-5.0.6-150600.3.6.3 uyuni-config-modules-5.0.12-150600.3.9.3 uyuni-java-common-5.0.6-150600.3.6.3 woodstox-4.4.2-150600.3.3.3 python3-spacewalk-client-tools-5.0.8-150600.4.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 release-notes-susemanager-proxy-5.0.3-150600.11.20.1 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-backend-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-client-tools-5.0.8-150600.4.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-proxy-broker-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-proxy-common-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-proxy-package-manager-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 spacewalk-proxy-redirect-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4 uyuni-coco-attestation-core-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 uyuni-coco-attestation-module-secureboot-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 uyuni-coco-attestation-module-snpguest-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 uyuni-java-common-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3 branch-network-formula-0.1.1728559936.c16d4fb-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 cobbler-3.3.3-150600.5.11.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 locale-formula-0.4.0-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 pxe-formula-0.3.0-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 python3-spacewalk-client-tools-5.0.8-150600.4.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 release-notes-susemanager-5.0.3-150600.11.24.1 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 saltboot-formula-0.1.1728559936.c16d4fb-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacecmd-5.0.11-150600.4.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-app-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-iss-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-iss-export-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-package-push-server-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-server-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-sql-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-sql-postgresql-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-tools-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-xml-export-libs-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-backend-xmlrpc-5.0.11-150600.4.9.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-base-5.0.16-150600.3.13.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-base-minimal-5.0.16-150600.3.13.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-base-minimal-config-5.0.16-150600.3.13.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-client-tools-5.0.8-150600.4.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-config-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-html-5.0.16-150600.3.13.5 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-java-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-java-config-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-java-lib-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-java-postgresql-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-search-5.0.3-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-setup-5.0.7-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-taskomatic-5.0.19-150600.3.14.4 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 spacewalk-utils-5.0.6-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 supportutils-plugin-salt-1.2.3-150600.4.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 supportutils-plugin-susemanager-5.0.5-150600.3.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-5.0.11-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-build-keys-15.5.3-150600.5.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-build-keys-web-15.5.3-150600.5.6.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-docs_en-5.0.3-150600.11.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-docs_en-pdf-5.0.3-150600.11.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-schema-5.0.13-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-schema-utility-5.0.13-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-sls-5.0.12-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-sync-data-5.0.9-150600.3.11.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 susemanager-tools-5.0.11-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 uyuni-config-modules-5.0.12-150600.3.9.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 woodstox-4.4.2-150600.3.3.3 as a component of Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1 DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking added to DOMPurify in recent releases. It was also possible to use Prototype Pollution to weaken the depth check. This renders dompurify unable to avoid cross site scripting (XSS) attacks. This issue has been addressed in versions 2.5.4 and 3.1.3 of DOMPurify. All users are advised to upgrade. There are no known workarounds for this vulnerability. CVE-2024-45801 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:python3-spacewalk-client-tools-5.0.8-150600.4.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:release-notes-susemanager-proxy-5.0.3-150600.11.20.1 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-backend-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-client-tools-5.0.8-150600.4.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-proxy-broker-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-proxy-common-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-proxy-package-manager-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.3.7.11.4:spacewalk-proxy-redirect-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3:uyuni-coco-attestation-core-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3:uyuni-coco-attestation-module-secureboot-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3:uyuni-coco-attestation-module-snpguest-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server-attestation:5.0.3.6.11.3:uyuni-java-common-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:branch-network-formula-0.1.1728559936.c16d4fb-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:cobbler-3.3.3-150600.5.11.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:locale-formula-0.4.0-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:pxe-formula-0.3.0-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:python3-spacewalk-client-tools-5.0.8-150600.4.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:release-notes-susemanager-5.0.3-150600.11.24.1 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:saltboot-formula-0.1.1728559936.c16d4fb-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacecmd-5.0.11-150600.4.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-app-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-iss-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-iss-export-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-package-push-server-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-server-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-sql-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-sql-postgresql-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-tools-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-xml-export-libs-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-backend-xmlrpc-5.0.11-150600.4.9.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-base-5.0.16-150600.3.13.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-base-minimal-5.0.16-150600.3.13.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-base-minimal-config-5.0.16-150600.3.13.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-client-tools-5.0.8-150600.4.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-config-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-html-5.0.16-150600.3.13.5 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-java-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-java-config-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-java-lib-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-java-postgresql-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-search-5.0.3-150600.3.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-setup-5.0.7-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-taskomatic-5.0.19-150600.3.14.4 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:spacewalk-utils-5.0.6-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:supportutils-plugin-salt-1.2.3-150600.4.3.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:supportutils-plugin-susemanager-5.0.5-150600.3.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-5.0.11-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-build-keys-15.5.3-150600.5.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-build-keys-web-15.5.3-150600.5.6.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-docs_en-5.0.3-150600.11.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-docs_en-pdf-5.0.3-150600.11.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-schema-5.0.13-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-schema-utility-5.0.13-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-sls-5.0.12-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-sync-data-5.0.9-150600.3.11.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:susemanager-tools-5.0.11-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:uyuni-config-modules-5.0.12-150600.3.9.3 Container suse/manager/5.0/x86_64/server:5.0.3.7.16.1:woodstox-4.4.2-150600.3.3.3 important