Lucene search

K
osvGoogleOSV:GHSA-C57V-HC7M-8PX2
HistoryFeb 23, 2023 - 9:30 p.m.

Cross-site Scripting in Quarkus

2023-02-2321:30:16
Google
osv.dev
12

0.001 Low

EPSS

Percentile

21.4%

If the Quarkus Form Authentication session cookie Path attribute is set to / then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.

0.001 Low

EPSS

Percentile

21.4%