Lucene search
RedHatRHSA-2024:0494HistoryJan 25, 2024 - 1:50 p.m.
(RHSA-2024:0494) Important: Red Hat build of Quarkus 2.13.9.SP1 release and security update
2024-01-2513:50:01
access.redhat.com
16
red hat quarkus 2.13.9.sp1
security update
bug fixes
enhancements
release notes
embargoed cves
authorization flaw
resteasy reactive
unix
This release of Red Hat build of Quarkus 2.13.9.SP1 includes security updates, bug fixes, and enhancements. For more information, see the release notes page listed in the References section.
EMBARGOED TRIAGE CVE-2023-6267 : io.quarkus.resteasy.reactive/resteasy-reactive: quarkus: json payload getting processed prior to security checks when rest resources are used with annotations. [quarkus-2]
EMBARGOED CVE-2023-5675 : io.quarkus.resteasy.reactive/resteasy-reactive: quarkus: Authorization flaw in Quarkus RestEasy Reactive and Classic when “quarkus.security.jaxrs.deny-unannotated-endpoints” or "quarkus.security.jaxrs.default-rol … [quarkus-2.13]
Related
redhat
redhat
ibm
ibm
cve
cve
CVE-2023-6267
2024-01-25 19:15:08
CVE-2023-5675
2024-04-25 16:15:08
osv
osv
CVE-2023-6267
2024-01-25 19:15:08
Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability
2024-01-25 21:32:14
Quarkus: authorization flaw in quarkus resteasy reactive and classic
2024-04-25 18:30:39
wolfi
wolfi
CVE-2023-5675 vulnerabilities
2024-05-29 03:07:31
nvd
nvd
CVE-2023-5675
2024-04-25 16:15:08
CVE-2023-6267
2024-01-25 19:15:08
redhatcve
redhatcve
CVE-2023-6267
2024-01-25 18:12:45
CVE-2023-5675
2024-01-25 18:12:56
vulnrichment
vulnrichment
github
github
veracode
veracode
Improper Authorization
2024-04-26 12:55:40
cvelist
cvelist
cgr
cgr
CVE-2023-5675 vulnerabilities
2024-05-19 03:07:16
prion
prion
Design/Logic Flaw
2024-01-25 19:15:00