Lucene search
PRIOn knowledge basePRION:CVE-2023-6394HistoryDec 09, 2023 - 2:15 a.m.
Authentication flaw
2023-12-0902:15:00
PRIOn knowledge base
www.prio-n.com
4
authentication
flaw
quarkus
websocket
graphql
endpoint
A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and functionality outside of normal granted API permissions.
Related
cvelist
cvelist
CVE-2023-6394 Quarkus: graphql operations over websockets bypass
2023-12-09 01:26:52
nvd
nvd
CVE-2023-6394
2023-12-09 02:15:06
cve
cve
CVE-2023-6394
2023-12-09 02:15:06
osv
osv
CVE-2023-6394
2023-12-09 02:15:06
Authorization bypass in Quarkus
2023-12-09 03:30:15
veracode
veracode
Authorization Bypass
2023-12-12 11:53:27
redhatcve
redhatcve
CVE-2023-6394
2023-12-09 01:26:32
github
github
Authorization bypass in Quarkus
2023-12-09 03:30:15
redhat
redhat