> CVE-2024-52798

« BACK_TO_HOME
PUBLISHED
2024-12-05 23:15
MODIFIED
2025-01-24 20:15
EPSS (Prob. Exploit)
0.79%
Top 44.3%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-04 OSV 🔗 2026-03-01

> DESCRIPTION

path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.

> AFFECTED_PRODUCTS

Red Hat - Red Hat OpenShift AI 2.16
Red Hat - Red Hat OpenShift Container Platform 4.17
Red Hat - Red Hat Developer Hub 1.5
Red Hat - Discovery 1 for RHEL 9
Red Hat - RHODF-4.16-RHEL-9
Red Hat - RHODF-4.17-RHEL-9
Red Hat - Red Hat Developer Hub (RHDH) 1.4
Red Hat - Red Hat OpenShift Service Mesh 2.5 for RHEL 8
Red Hat - HawtIO HawtIO 4.2.0
Red Hat - Red Hat OpenShift AI 2.17
Red Hat - Red Hat Developer Hub 1.3 on RHEL 9
Version: 1.3

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: HawtIO 4.2.0 for Red Hat build of Apache Camel 4 Release and security update.
HawtIO 4.2.0 for Red Hat build of Apache Camel 4 GA Release is now available. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and e...
Red Hat Security Advisory: RHOAI 2.16.0 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: Red Hat Developer Hub 1.5.1 release.
Red Hat Developer Hub 1.5.1 has been released.
Red Hat Security Advisory: RHOAI 2.16.0 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: RHOAI 2.17.0 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: updated discovery container images
Updated container images are now available for Discovery 1.12.
Red Hat Security Advisory: OpenShift Container Platform 4.17.15 bug fix and security update
Red Hat OpenShift Container Platform release 4.17.15 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red H...
Red Hat Security Advisory: OpenShift Container Platform 4.17.15 security and extras update
Red Hat OpenShift Container Platform release 4.17.15 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Containe...
Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.8
Red Hat OpenShift Service Mesh Containers for 2.5.8 This update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is...
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.6 Bug fix update
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.16.6 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.3 Bug Fix Update
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.17.3 on Red Hat Enterprise Linux 9 from Red Hat Container Registry.
Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.4.1 release.
Red Hat Developer Hub 1.4 has been released.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> GITHUB SECURITY ADVISORY

GHSA-rhx6-c78j-4q9w HIGH

path-to-regexp contains a ReDoS

AFFECTED PACKAGES:
NPM / path-to-regexp
< 0.1.12
Fixed in: 0.1.12

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x

AFFECTED PACKAGES:
Unknown / Unknown
13 versions affected
ALIASES:
GHSA-rhx6-c78j-4q9w

> HISTORIQUE DES MODIFICATIONS

Première apparition
05/12/2024 23:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:57
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:29
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:29
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME