Remote Code Execution (RCE)

🗓️ 30 Nov 2022 04:15:38Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 32 Views

Vulnerability in quarkus-vertx-http for remote code executio

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2022-4116	22 Nov 202222:13	–	circl
CNNVD	Quarkus 代码注入漏洞	22 Nov 202200:00	–	cnnvd
CNVD	Quarkus has an unspecified vulnerability	24 Nov 202200:00	–	cnvd
CVE	CVE-2022-4116	22 Nov 202200:00	–	cve
Cvelist	CVE-2022-4116	22 Nov 202200:00	–	cvelist
Github Security Blog	Code injection in quarkus dev ui config editor	22 Nov 202221:30	–	github
NVD	CVE-2022-4116	22 Nov 202219:15	–	nvd
OSV	CVE-2022-4116	22 Nov 202219:15	–	osv
OSV	GHSA-G56W-CWG4-HXX9 Code injection in quarkus dev ui config editor	22 Nov 202221:30	–	osv
Prion	Remote code execution	22 Nov 202219:15	–	prion

Vulners

Node

quarkus-vertx-http quarkus-vertx-httpRange2.14.0.CR1–2.14.1.Finaljava

OR

quarkus-vertx-http quarkus-vertx-httpRange0.23.0–2.13.4.Finaljava

OR

quarkus-vertx-http-deployment quarkus-vertx-http-deploymentRange2.14.0.CR1–2.14.1.Finaljava

OR

quarkus-vertx-http-deployment quarkus-vertx-http-deploymentRange2.13.0.CR1–2.13.4.Finaljava

OR

quarkus-vertx-http-deployment quarkus-vertx-http-deploymentRange1.11.0.CR1–2.12.3.Finaljava

Source	Link
github	www.github.com/quarkusio/quarkus/issues/29431
github	www.github.com/quarkusio/quarkus/pull/29342
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/quarkusio/quarkus/commit/e8865318eb5a9b14ffe7bc4dc603db5e3fb8765c
github	www.github.com/quarkusio/quarkus/commit/cc26704d3bed46ed1d5caee90f22894952a07182
github	www.github.com/advisories/GHSA-g56w-cwg4-hxx9
access	www.access.redhat.com/security/cve/cve-2022-4116

09 Aug 2023 14:45Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

EPSS0.029

quarkus vertx http vulnerability remote code execution drive-by localhost attacks attacker malicious query parameters dev ui config editor software