CVE-2022-0981

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

CVE-2022-0981

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

Design/Logic Flaw

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

CVE-2022-0981

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

com.ibm.research.kar:kar-runtime-quarkus (>=1.0.9, <=1.3.5), io.automatiko.addons:automatiko-files-filesystem-addon (>=0.9.0, <=0.13.0) +50 more potentially affected by CVE-2022-0981 via io.quarkus.resteasy.reactive:resteasy-reactive-vertx (>=1.11.0.beta1, <=2.7.0.final)

io.quarkus.resteasy.reactive:resteasy-reactive-vertx MAVEN version =1.11.0.beta1, =1.0.9, =0.9.0, =0.9.0, =0.9.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.0.2, =0.0.9 - io.javaoperatorsdk.admissioncontroller.sample:quarkus-sample 0.2.0 -...

CVE-2022-0981

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

CVE-2022-0981

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

Quarkus security vulnerabilities

Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus, which stems from the fact that in RestEasy Reactive, state and possibly associated permissions may leak from one web request to another. The vulnerability allows a...

CVE-2022-0981: Incorrect Authorization

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

PT-2022-13570

Name of the Vulnerable Software and Affected Versions Quarkus affected versions not specified Description A flaw in Quarkus allows the state and potentially associated permissions to leak from one web request to another in RestEasy Reactive. This issue enables a low-privileged user to perform...

CVE-2022-0981

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...