Lucene search
K

14 matches found

RedHat Linux
RedHat Linux
added 2022/12/14 1:15 p.m.3 views

quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE

A vulnerability was found in quarkus. This issue occurs in Dev UI Config Editor, which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS6.1AI score0.029EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/12/13 1:20 p.m.42 views

Important: Red Hat Security Advisory: Red Hat build of Quarkus Platform 2.7.6.SP3 and security update

An update is now available for Red Hat build of Quarkus Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

9.8CVSS7.1AI score0.05991EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2022/12/13 1:20 p.m.4 views

quarkus_dev_ui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE

A vulnerability was found in quarkus. This issue occurs in Dev UI Config Editor, which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS6.1AI score0.029EPSS
Exploits0References4
The Hacker News
The Hacker News
added 2022/12/01 11:44 a.m.59 views

Researchers Disclose Critical RCE Vulnerability Affecting Quarkus Java Framework

A critical security vulnerability has been disclosed in the Quarkus Java framework that could be potentially exploited to achieve remote code execution on affected systems. Tracked as CVE-2022-4116 CVSS score: 9.8, the shortcoming could be trivially abused by a malicious actor without any...

9.8CVSS1.3AI score0.029EPSS
Exploits0
Veracode
Veracode
added 2022/11/30 4:15 a.m.33 views

Remote Code Execution (RCE)

quarkus-vertx-http is vulnerable to remote code execution. The vulnerability exists in multiple functions due to drive-by localhost attacks which allows an attacker to inject and execute malicious query parameters via the Dev UI Config Editor...

9.8CVSS9.5AI score0.029EPSS
Exploits0References7Affected Software2
OSV
OSV
added 2022/11/22 9:30 p.m.19 views

GHSA-G56W-CWG4-HXX9 Code injection in quarkus dev ui config editor

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS8.7AI score0.029EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/11/22 9:30 p.m.29 views

Code injection in quarkus dev ui config editor

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS9.3AI score0.029EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2022/11/22 7:15 p.m.12 views

CVE-2022-4116

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS0.029EPSS
Exploits0References1
OSV
OSV
added 2022/11/22 7:15 p.m.22 views

CVE-2022-4116

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.8CVSS9.7AI score0.029EPSS
Exploits0References1
Prion
Prion
added 2022/11/22 7:15 p.m.23 views

Remote code execution

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

7.5CVSS9.6AI score0.029EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2022/11/22 8:26 a.m.30 views

CVE-2022-4116

A vulnerability was found in quarkus. This issue occurs in Dev UI Config Editor, which is vulnerable to drive-by localhost attacks leading to remote code execution...

7.5CVSS4.6AI score0.029EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/11/22 12:0 a.m.1 views

PT-2022-6100 · Quarkus · Quarkus

Name of the Vulnerable Software and Affected Versions: quarkus affected versions not specified Description: The issue is related to the Dev UI Config Editor component of the quarkus Java framework, which is vulnerable to remote code execution due to incorrect code generation management. This can...

9.8CVSS8AI score0.029EPSS
Exploits0References20
Cvelist
Cvelist
added 2022/11/22 12:0 a.m.17 views

CVE-2022-4116

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...

9.9AI score0.029EPSS
Exploits0References1
CVE
CVE
added 2022/11/22 12:0 a.m.105 views

CVE-2022-4116

CVE-2022-4116 affects the Quarkus Dev UI Config Editor (quarkus_dev_ui). It enables drive-by localhost attacks leading to remote code execution. Red Hat's RHSA-2022:9023/8957 include a security fix in the Red Hat build of Quarkus (2.13.5 release) and advise updating; other advisories (GHSA OSV) d...

9.8CVSS9.5AI score0.029EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder