io.automatiko.addons:automatiko-cassandra-persistence-addon (0.2.0), io.automatiko.addons:automatiko-events-websocket-addon (0.2.0) +102 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.12.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.automatiko.addons:automatiko-cassandra-persistence-addon 0.2.0 -...

io.quarkus:quarkus-amazon-lambda-http (1.3.0.alpha1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.alpha1) +49 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.0.alpha1)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.0.alpha1 -...

com.github.adminfaces:quarkus-omnifaces (1.4.0), com.github.adminfaces:quarkus-omnifaces-deployment (1.4.0) +120 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.13.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.github.adminfaces:quarkus-omnifaces 1.4.0 -...

br.com.labbs:quarkus-monitor (>=0.1.5, <=0.3.0), br.com.labbs:quarkus-monitor-deployment (>=0.1.5, <=0.3.0) +84 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.9.2.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - br.com.labbs:quarkus-monitor =0.1.5, =0.1.5, =0.3.0 -...

io.quarkiverse.cxf:quarkus-cxf (0.1.1), io.quarkiverse.cxf:quarkus-cxf-deployment (0.1.1) +390 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.10.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.10.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf 0.1.1 - io.quarkiverse.cxf:quarkus-cxf-deployment 0.1.1 -...

io.quarkus:quarkus-amazon-lambda-http (1.10.4.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.10.4.final) +72 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.10.4.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.10.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.10.4.final -...

io.quarkus:quarkus-amazon-lambda-http (1.7.3.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.3.final) +69 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.3.final -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.8.38, <=0.8.40), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.8.38, <=0.8.40) +1448 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=2.0.0.alpha1, <=2.16.10.final)

io.quarkus:quarkus-vertx-http MAVEN version =2.0.0.alpha1, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =1.0.0-alpha1, =1.0.2, =1.5.4 and more Source cves: CVE-2023-4853 Source advisory: GHSA-4F4R-WGV2-JJVGhttps://vulne...

com.github.adminfaces:quarkus-omnifaces (1.3.0), com.github.adminfaces:quarkus-omnifaces-deployment (1.3.0) +109 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.12.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.12.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.github.adminfaces:quarkus-omnifaces 1.3.0 -...

io.quarkus:quarkus-amazon-lambda-http (1.6.1.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.6.1.final) +73 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.6.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.6.1.final -...

Cross-site Scripting (XSS)

quarkus-vertx-http is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library's form authentication session cookie path attribute is set to /, which allows an attacker to redirect malicious URLs, resulting in information disclosure...

Red Hat quarkus-vertx-http 跨站脚本漏洞

Red Hat quarkus-vertx-http is a toolkit for building reactive applications from Red Hat USA. A security vulnerability exists in Red Hat quarkus-vertx-http. An attacker could exploit the vulnerability to perform a cross-site scripting attack, which could lead to information disclosure...

Quarkus 安全漏洞

Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus quarkus-vertx-http, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...