io.quarkus:quarkus-amazon-lambda-http (1.11.5.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.11.5.final) +203 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.11.5.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.11.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.11.5.final -...

io.backpackcloud:fakeomatic (0.3.0), io.github.project-openubl:xml-builder-server-x (1.2.0.rc1) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.5.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.backpackcloud:fakeomatic 0.3.0 - io.github.project-openubl:xml-builder-server-x 1.2.0.rc1 -...

io.quarkus:quarkus-amazon-lambda-http (0.28.0), io.quarkus:quarkus-amazon-lambda-http-deployment (0.28.0) +47 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (0.28.0)

io.quarkus:quarkus-vertx-http MAVEN version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 0.28.0 - io.quarkus:quarkus-amazon-lambda-http-deployment 0.28...

com.github.fmcejudo:quarkus-eureka (>=0.0.6, <=0.0.8), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.6, <=0.0.8) +179 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.2.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.github.fmcejudo:quarkus-eureka =0.0.6, =0.0.6, =1.2.0.final, =1.2.1.final -...

io.quarkus:quarkus-amazon-lambda-http (1.3.4.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.4.final) +53 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.4.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.4.final -...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.8.38, <=0.8.40), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.8.38, <=0.8.40) +1448 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=2.0.0.alpha1, <=2.16.10.final)

io.quarkus:quarkus-vertx-http MAVEN version =2.0.0.alpha1, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =1.0.0-alpha1, =1.0.2, =1.5.4 and more Source cves: CVE-2023-4853 Source advisory: OSV:GHSA-4F4R-WGV2-JJVGhttps://v...

io.quarkus:quarkus-amazon-lambda-http (0.27.0), io.quarkus:quarkus-amazon-lambda-http-deployment (0.27.0) +98 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (0.27.0)

io.quarkus:quarkus-vertx-http MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 0.27.0 - io.quarkus:quarkus-amazon-lambda-http-deployment 0.27...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (1.2.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (1.2.0) +240 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=3.3.0, <=3.3.2)

io.quarkus:quarkus-vertx-http MAVEN version =3.3.0, =0.0.10, =1.8.1, =1.8.1, =1.8.6, =1.8.6, =1.9.0, =1.9.0, =1.10.1, =1.10.1, =1.10.3 and more Source cves: CVE-2023-4853 Source advisory: MEND:CVE-2023-4853...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.9.38, <=1.1.0), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.9.38, <=1.1.0) +921 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=3.0.0.final, <=3.2.5.final)

io.quarkus:quarkus-vertx-http MAVEN version =3.0.0.final, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.0.25, =1.0.28 and more Source cves: CVE-2023-4853 Source advisory: MEND:CVE-2023-4853...

ai.timefold.solver:timefold-solver-quarkus-benchmark-integration-test (>=0.8.38, <=0.8.40), ai.timefold.solver:timefold-solver-quarkus-devui-integration-test (>=0.8.38, <=0.8.40) +1818 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (>=0.23.0, <=2.16.10.final)

io.quarkus:quarkus-vertx-http MAVEN version =0.23.0, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.8.38, =0.1.5, =0.1.5, =0.0.2-alpha, =0.0.3-alpha, =0.0.10-alpha, =0.0.4-alpha, =1.0.1 and more Source cves: CVE-2023-4853 Source advisory: MEND:CVE-2023-4853https://vulne...

Cross-site Scripting (XSS)

quarkus-vertx-http is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the library's form authentication session cookie path attribute is set to /, which allows an attacker to redirect malicious URLs, resulting in information disclosure...

Red Hat quarkus-vertx-http 跨站脚本漏洞

Red Hat quarkus-vertx-http is a toolkit for building reactive applications from Red Hat USA. A security vulnerability exists in Red Hat quarkus-vertx-http. An attacker could exploit the vulnerability to perform a cross-site scripting attack, which could lead to information disclosure...

Quarkus 安全漏洞

Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus quarkus-vertx-http, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...