gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.7.0.cr2), io.quarkus:io.quarkus.gradle.plugin (1.7.0.cr2) +326 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.7.0.cr2)

io.quarkus:quarkus-core MAVEN version 1.7.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.7.0.cr2 - io.quarkus:io.quarkus.gradle.plugin 1.7.0.cr2 -...

com.marcnuri.yakc:quarkues-yakc-extension (0.0.0), com.marcnuri.yakc:quarkues-yakc-extension-deployment (0.0.0) +1283 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.9.0.final)

io.quarkus:quarkus-core MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - com.marcnuri.yakc:quarkues-yakc-extension 0.0.0 - com.marcnuri.yakc:quarkues-yakc-extension-deployment 0.0....

gradle.plugin.io.quarkus:quarkus-gradle-plugin (2.0.0.alpha3), io.quarkus:io.quarkus.gradle.plugin (2.0.0.alpha3) +1434 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (2.0.0.alpha3)

io.quarkus:quarkus-core MAVEN version 2.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 2.0.0.alpha3 - io.quarkus:io.quarkus.gradle.plugin...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (2.0.0.cr2), io.quarkiverse.operatorsdk:quarkus-operator-sdk (2.0.0.beta1) +464 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (2.0.0.cr2)

io.quarkus:quarkus-core MAVEN version 2.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 2.0.0.cr2 - io.quarkiverse.operatorsdk:quarkus-operator-sdk...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (2.0.1.final), io.quarkiverse.githubapp:quarkus-github-app (>=1.1.2, <=1.1.3) +479 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (2.0.1.final)

io.quarkus:quarkus-core MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 2.0.1.final - io.quarkiverse.githubapp:quarkus-github-app...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (2.1.4.final), io.quarkus.platform:quarkus-maven-plugin (2.1.4.final) +473 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (2.1.4.final)

io.quarkus:quarkus-core MAVEN version 2.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 2.1.4.final - io.quarkus.platform:quarkus-maven-plugin...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.11.6.final), io.quarkus:io.quarkus.gradle.plugin (1.11.6.final) +412 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.11.6.final)

io.quarkus:quarkus-core MAVEN version 1.11.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.11.6.final - io.quarkus:io.quarkus.gradle.plugin...

gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.11.0.cr1), io.quarkus:io.quarkus.gradle.plugin (1.11.0.cr1) +396 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.11.0.cr1)

io.quarkus:quarkus-core MAVEN version 1.11.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.11.0.cr1 - io.quarkus:io.quarkus.gradle.plugin 1.11.0.cr1 -...

com.diligesoft:camel-utils (0.1), gradle.plugin.io.quarkus:quarkus-gradle-plugin (1.13.6.final) +452 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (1.13.6.final)

io.quarkus:quarkus-core MAVEN version 1.13.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - com.diligesoft:camel-utils 0.1 - gradle.plugin.io.quarkus:quarkus-gradle-plugin 1.13.6.final -...

Gradle Quarkus Plugin Disclosure

The vulnerability of the Gradle plugin for the Quarkus Java framework is related to the disclosure of information through environment variables. Exploiting this vulnerability allows an attacker to disclose the protected information...

com.sngular:scc-multiapi-converter (3.4.0), gradle.plugin.org.springframework.cloud:spring-cloud-contract-gradle-plugin (>=3.1.0, <=3.1.9) +17 more potentially affected by CVE-2024-22236 via org.springframework.cloud:spring-cloud-contract-shade (>=3.1.0, <=3.1.9)

org.springframework.cloud:spring-cloud-contract-shade MAVEN version =3.1.0, =3.1.0, =0.32.0.release, =2.3.0, =4.4.6, =4.4.6, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.9 - org.springframework.cloud:spring-cloud-contract-stub-runn...

gradle.plugin.org.springframework.cloud:spring-cloud-contract-gradle-plugin (4.1.0), org.springframework.cloud.contract:org.springframework.cloud.contract.gradle.plugin (4.1.0) +10 more potentially affected by CVE-2024-22236 via org.springframework.cloud:spring-cloud-contract-shade (4.1.0)

org.springframework.cloud:spring-cloud-contract-shade MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-contract-shade and may be impacted: -...

gradle.plugin.org.springframework.cloud:spring-cloud-contract-gradle-plugin (>=4.0.1, <=4.0.4), org.springframework.cloud.contract:org.springframework.cloud.contract.gradle.plugin (>=4.0.0, <=4.0.4) +10 more potentially affected by CVE-2024-22236 via org.springframework.cloud:spring-cloud-contract-shade (>=4.0.0, <=4.0.4)

org.springframework.cloud:spring-cloud-contract-shade MAVEN version =4.0.0, =4.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.4 Source cves: CVE-2024-22236 Source advisory: OSV:GHSA-P6RP-MX85-M459...

gradle.plugin.org.springframework.cloud:spring-cloud-contract-gradle-plugin (>=4.0.1, <=4.0.4), org.springframework.cloud.contract:org.springframework.cloud.contract.gradle.plugin (>=4.0.0, <=4.0.4) +10 more potentially affected by CVE-2024-22236 via org.springframework.cloud:spring-cloud-contract-shade (>=4.0.0, <=4.0.4)

org.springframework.cloud:spring-cloud-contract-shade MAVEN version =4.0.0, =4.0.1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.4 Source cves: CVE-2024-22236 Source advisory: MEND:CVE-2024-22236...

Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application...

CVE-2023-5720

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application...

CVE-2023-5720

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application...

Design/Logic Flaw

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application...

CVE-2023-5720

CVE-2023-5720 affects Quarkus and describes an information disclosure risk stemming from improper sanitization of artifacts created via the Gradle plugin. The flaw allows access to potentially sensitive build-system information embedded in the application. Connected sources reiterate the same vul...

CVE-2023-5720 Quarkus: build env information disclosure via gradle plugin

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application...