Aller au contenu

Vulnérabilités de Red Hat Red Hat build of Quarkus

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-3653 A vulnerability was found in Undertow 5.3 Moyenne 8 juil. 2024
CVE-2024-5971 A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed 7.5 Élevée 8 juil. 2024
CVE-2024-1726 A flaw was discovered in the RESTEasy Reactive implementation in Quarkus 5.3 Moyenne 25 avr. 2024
CVE-2023-6717 Keycloak: xss via assertion consumer service url in saml post-binding flow 6.0 Moyenne 25 avr. 2024
CVE-2024-1132 Keycloak: path transversal in redirection validation 8.1 Élevée 17 avr. 2024
CVE-2024-2700 Quarkus-core: leak of local configuration properties into quarkus applications 7.0 Élevée 4 avr. 2024
CVE-2024-1300 Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support 5.4 Moyenne 2 avr. 2024
CVE-2024-1023 Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx 6.5 Moyenne 27 mars 2024
CVE-2024-1979 A vulnerability was found in Quarkus 3.5 Faible 13 mars 2024
CVE-2024-1635 Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 Élevée 19 févr. 2024
CVE-2024-1459 Undertow: directory traversal vulnerability 5.3 Moyenne 12 févr. 2024
CVE-2023-5236 A flaw was found in Infinispan, which does not detect circular object references when unmarshalling 4.4 Moyenne 18 déc. 2023
CVE-2023-5379 Undertow: ajp request closes connection exceeding maxrequestsize 7.5 Élevée 12 déc. 2023
CVE-2023-6394 A flaw was found in Quarkus 7.4 Élevée 9 déc. 2023
CVE-2023-6393 A flaw was found in the Quarkus Cache Runtime 5.3 Moyenne 6 déc. 2023
CVE-2023-3223 A flaw was found in undertow 7.5 Élevée 27 sept. 2023
CVE-2022-4245 A flaw was found in codehaus-plexus 4.3 Moyenne 25 sept. 2023
CVE-2022-4244 A flaw was found in codeplex-codehaus 7.5 Élevée 25 sept. 2023
CVE-2023-4853 Quarkus: http security policy bypass 8.1 Élevée 20 sept. 2023
CVE-2023-1108 A flaw was found in undertow 7.5 Élevée 14 sept. 2023
CVE-2022-1415 A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data 8.1 Élevée 11 sept. 2023

Autres produits Red Hat