Lucene search
PRIOn knowledge basePRION:CVE-2023-5720HistoryNov 15, 2023 - 2:15 p.m.
Design/Logic Flaw
2023-11-1514:15:00
PRIOn knowledge base
www.prio-n.com
3
quarkus
gradle plugin
logic flaw
sensitive information
A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| quarkus | eq | 3.0.0 candidate-release1 | |
| quarkus | eq | 3.0.0 candidate-release2 | |
| quarkus | ge | 3.0.1 | |
| quarkus | lt | 3.2.8 |
Related
github
github
osv
osv
CVE-2023-5720
2023-11-15 14:15:07
nvd
nvd
CVE-2023-5720
2023-11-15 14:15:07
redhatcve
redhatcve
CVE-2023-5720
2023-11-09 01:58:23
cve
cve
CVE-2023-5720
2023-11-15 14:15:07
veracode
veracode
Sensitive Information Disclosure
2023-11-16 10:06:06
cvelist
cvelist
CVE-2023-5720 Quarkus: build env information disclosure via gradle plugin
2023-11-15 13:57:52