Lucene search
+L

6 matches found

RedHat Linux
RedHat Linux
•added 2023/12/07 2:26 p.m.•6 views

quarkus: Potential invalid reuse of context when @CacheResult on a Uni is used

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

5.3CVSS0.00636EPSS
SaveExploits0References4
Veracode
Veracode
•added 2023/12/07 11:09 a.m.•27 views

Sensitive Information Disclosure

quarkus-cache is vulnerable to Sensitive Information Disclosure. The vulnerability arises due to improper processing of a request which utilizes a uni cache using @CacheResult. The cached uni can contain sensitive information from other POST requests, resulting in Sensitive Information Disclosure...

5.3CVSS6.3AI score0.00636EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2023/12/06 5:15 p.m.•56 views

CVE-2023-6393

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

5.3CVSS0.00636EPSS
SaveExploits0References3
CVE
CVE
•added 2023/12/06 4:58 p.m.•128 views

CVE-2023-6393

CVE-2023-6393 affects the Quarkus Cache Runtime (quarkus-cache). The issue is a potential invalid reuse of context when a Uni cached with @CacheResult reuses the initial completion context, causing the processing to switch to the cached Uni instead of the request context. This can allow a POST re...

5.3CVSS5.9AI score0.00636EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2023/12/06 4:58 p.m.•2 views

CVE-2023-6393

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

6CVSS0.00636EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/06 12:00 a.m.•5 views

CVE-2023-6393: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

5.3CVSS5.9AI score0.00636EPSS
SaveExploits0References6
Rows per page
Query Builder