Lucene search
GitHub Advisory DatabaseGHSA-C57V-HC7M-8PX2HistoryFeb 23, 2023 - 9:30 p.m.
Cross-site Scripting in Quarkus
2023-02-2321:30:16
CWE-79
GitHub Advisory Database
github.com
19
0.001 Low
EPSS
Percentile
20.8%
If the Quarkus Form Authentication session cookie Path attribute is set to / then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.
| CPE | Name | Operator | Version |
|---|---|---|---|
| io.quarkus:quarkus-vertx-http | lt | 2.13.7.Final |
Related
redhatcve
redhatcve
CVE-2023-0044
2023-01-04 08:35:35
osv
osv
Cross-site Scripting in Quarkus
2023-02-23 21:30:16
CVE-2023-0044
2023-02-23 20:15:12
veracode
veracode
Cross-site Scripting (XSS)
2023-03-01 02:13:38
cvelist
cvelist
CVE-2023-0044
2023-02-23 00:00:00
cve
cve
CVE-2023-0044
2023-02-23 20:15:12
prion
prion
Design/Logic Flaw
2023-02-23 20:15:00
redhat
redhat
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-03-29 18:36:09