Sensitive Information Disclosure

quarkus-cache is vulnerable to Sensitive Information Disclosure. The vulnerability arises due to improper processing of a request which utilizes a uni cache using @CacheResult. The cached uni can contain sensitive information from other POST requests, resulting in Sensitive Information Disclosure...

CVE-2023-6393

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contain...

CVE-2023-6393

CVE-2023-6393 affects the Quarkus Cache Runtime (quarkus-cache). The issue is a potential invalid reuse of context when a Uni cached with @CacheResult reuses the initial completion context, causing the processing to switch to the cached Uni instead of the request context. This can allow a POST re...