4 matches found
Remote Code Execution (RCE)
quarkus-vertx-http is vulnerable to remote code execution. The vulnerability exists in multiple functions due to drive-by localhost attacks which allows an attacker to inject and execute malicious query parameters via the Dev UI Config Editor...
9.8CVSS9.5AI score0.32516EPSS
SaveExploits0References7Affected Software2
GHSA-G56W-CWG4-HXX9 Code injection in quarkus dev ui config editor
A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution...
9.8CVSS8.7AI score0.32516EPSS
SaveExploits0References6
20