Not rated
CVE-2022-0981 A flaw was found in Quarkus
Description
A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| quarkus | Versions not published |
Other CVEs of quarkus
The 4 CVEs of quarkus →
CVE-2023-0481
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class…
3.3
Low
CVE-2022-4116
A vulnerability was found in quarkus
9.8
Critical
CVE-2022-2466
It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable…
Not rated