Lucene search
K

7 matches found

RedHat Linux
RedHat Linux
added 2023/12/05 2:36 p.m.2 views

quarkus: HTTP security policy bypass

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...

8.1CVSS5.7AI score0.00455EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2023/10/25 1:3 p.m.3 views

quarkus: HTTP security policy bypass

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...

8.1CVSS5.7AI score0.00455EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2023/10/05 3:27 p.m.2 views

quarkus: HTTP security policy bypass

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...

8.1CVSS5.7AI score0.00455EPSS
Exploits1References5
OSV
OSV
added 2023/09/20 12:30 p.m.1 views

GHSA-4F4R-WGV2-JJVG Quarkus HTTP vulnerable to incorrect evaluation of permissions

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...

8.1CVSS7.1AI score0.00455EPSS
Exploits1References17
OSV
OSV
added 2023/09/20 10:15 a.m.25 views

CVE-2023-4853

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...

8.1CVSS7AI score0.00455EPSS
Exploits1References12
Cvelist
Cvelist
added 2023/09/20 9:47 a.m.22 views

CVE-2023-4853 Quarkus: http security policy bypass

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...

8.1CVSS7.8AI score0.00455EPSS
Exploits1References12
RedHat Linux
RedHat Linux
added 2023/09/20 7:40 a.m.4 views

quarkus: HTTP security policy bypass

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized...

8.1CVSS5.7AI score0.00455EPSS
Exploits1References5
Rows per page
Query Builder