Description

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

INFO

Published Date :

2025-02-10T15:27:46.732Z

Last Modified :

2026-04-30T13:30:50.067Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2024-11831 vulnerability.

Vendors Products
Redhat
  • Acm
  • Advanced Cluster Security
  • Ansible Automation Platform
  • Apache Camel Hawtio
  • Ceph Storage
  • Cryostat
  • Discovery
  • Enterprise Linux
  • Integration
  • Jboss Data Grid
  • Jboss Enterprise Application Platform
  • Jboss Enterprise Bpms Platform
  • Jboss Fuse
  • Jbosseapxp
  • Logging
  • Migration Toolkit Virtualization
  • Openshift
  • Openshift Ai
  • Openshift Data Foundation
  • Openshift Devspaces
  • Openshift Distributed Tracing
  • Openshift Lightspeed
  • Openshift Pipelines
  • Optaplanner
  • Quay
  • Red Hat 3scale Amp
  • Red Hat Single Sign On
  • Rhdh
  • Rhel Dotnet
  • Satellite
  • Serverless
  • Service Mesh
  • Service Registry
  • Trusted Profile Analyzer
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-11831.

URL Resource
https://access.redhat.com/errata/RHBA-2025:0304 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:0381 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:10853 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:1334 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:1468 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:21068 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:21203 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:3870 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:4511 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8059 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8078 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8233 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8479 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8512 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8544 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8551 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:9294 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:1536 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:2769 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:8568 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2024-11831 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2312579 cve-icon cve-icon
https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e cve-icon cve-icon cve-icon
https://github.com/yahoo/serialize-javascript/pull/173 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-11831 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-11831 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact