Lucene search
PRIOn knowledge basePRION:CVE-2023-0044HistoryFeb 23, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-02-2320:15:00
PRIOn knowledge base
www.prio-n.com
4
quarkus
form authentication
session cookie
path attribute
cross-site attack
information disclosure
csrf prevention
nvd
If the Quarkus Form Authentication session cookie Path attribute is set to / then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.
Related
veracode
veracode
Cross-site Scripting (XSS)
2023-03-01 02:13:38
osv
osv
Cross-site Scripting in Quarkus
2023-02-23 21:30:16
CVE-2023-0044
2023-02-23 20:15:12
redhatcve
redhatcve
CVE-2023-0044
2023-01-04 08:35:35
nvd
nvd
CVE-2023-0044
2023-02-23 20:15:12
github
github
Cross-site Scripting in Quarkus
2023-02-23 21:30:16
cve
cve
CVE-2023-0044
2023-02-23 20:15:12
cvelist
cvelist
CVE-2023-0044
2023-02-23 00:00:00
redhat
redhat
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-03-29 18:36:09