com.github.adminfaces:quarkus-omnifaces (1.2.0), com.github.adminfaces:quarkus-omnifaces-deployment (1.2.0) +15 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.12.0.final)

io.quarkus:quarkus-undertow MAVEN version 1.12.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - com.github.adminfaces:quarkus-omnifaces 1.2.0 - com.github.adminfaces:quarkus-omnifaces-deployment...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.0.beta1), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.0.beta1) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.0.beta1)

io.quarkus:quarkus-undertow MAVEN version 1.11.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.0.beta1 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.12.2.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.12.2.final) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.12.2.final)

io.quarkus:quarkus-undertow MAVEN version 1.12.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.12.2.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.0.cr1), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.0.cr1) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.0.cr1)

io.quarkus:quarkus-undertow MAVEN version 1.13.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.0.cr1 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.3.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.3.final) +80 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.3.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.3.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.6.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.6.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.6.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.6.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.7.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.7.final) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.7.final)

io.quarkus:quarkus-undertow MAVEN version 1.11.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.7.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.1.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.1.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.1.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.1.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.7.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.7.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.7.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.7.final -...

io.quarkiverse.cxf:quarkus-cxf (0.6), io.quarkiverse.cxf:quarkus-cxf-deployment (0.6) +5 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.2.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkiverse.cxf:quarkus-cxf 0.6 - io.quarkiverse.cxf:quarkus-cxf-deployment 0.6 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.4.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.4.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.4.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.4.final -...

com.github.mcollovati:quarkus-hilla (>=2.0.0-beta1, <=2.0.1), com.github.mcollovati:quarkus-hilla-deployment (>=2.0.0, <=2.0.1) +8 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (>=3.3.0, <=3.3.2)

io.quarkus:quarkus-undertow MAVEN version =3.3.0, =2.0.0-beta1, =2.0.0, =3.3.0, =3.3.0, =3.3.0, =3.3.2 Source cves: CVE-2023-4853 Source advisory: OSV:GHSA-4F4R-WGV2-JJVG...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.6.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.6.final) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.6.final)

io.quarkus:quarkus-undertow MAVEN version 1.11.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.6.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.0.beta2), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.0.beta2) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.0.beta2)

io.quarkus:quarkus-undertow MAVEN version 1.11.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.0.beta2 -...

com.github.mcollovati:quarkus-hilla (>=2.0.0-beta1, <=2.0.1), com.github.mcollovati:quarkus-hilla-deployment (>=2.0.0, <=2.0.1) +8 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (>=3.3.0, <=3.3.2)

io.quarkus:quarkus-undertow MAVEN version =3.3.0, =2.0.0-beta1, =2.0.0, =3.3.0, =3.3.0, =3.3.0, =3.3.2 Source cves: CVE-2023-4853 Source advisory: MEND:CVE-2023-4853...

Information Disclosure

resteasy-reactive-common is vulnerable to Information Disclosure. The vulnerability exists because the readFrom function in FileBodyHandler.java creates a temporary file with insecure permissions, which allows a local user to read the temporary file created...

io.quarkus.resteasy.reactive:resteasy-reactive (2.12.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.12.0.cr1) +70 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.12.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.debezium:debezium-quarkus-outbox-deployment (>=1.9.0.beta1, <=1.9.8.final), io.quarkus.resteasy.reactive:resteasy-reactive (2.7.2.final) +60 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.7.2.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.7.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.debezium:debezium-quarkus-outbox-deployment...

io.quarkiverse.wiremock:quarkus-wiremock-integration-tests (0.1.0), io.quarkus.resteasy.reactive:resteasy-reactive (2.16.11.final) +76 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.16.11.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.16.11.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: -...

io.quarkiverse.amazonservices:quarkus-amazon-services-integration-tests (1.9.0), io.quarkus.resteasy.reactive:resteasy-reactive (2.16.8.final) +92 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.16.8.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.16.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: -...