Lucene search
Veracode Vulnerability DatabaseVERACODE:39466HistoryMar 01, 2023 - 2:13 a.m.
Cross-site Scripting (XSS)
2023-03-0102:13:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
quarkus-vertx-http
cross-site scripting
vulnerability
fix
form authentication
session cookie
0.001 Low
EPSS
Percentile
21.7%
quarkus-vertx-http is vulnerable to Cross-site Scripting (XSS). The vulnerability exists because the library’s form authentication session cookie path attribute is set to /, which allows an attacker to redirect malicious URLs, resulting in information disclosure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| quarkus - vert.x - http - runtime | le | 2.13.6.Final | |
| quarkus - vert.x - http - runtime | le | 2.13.6.Final |
Related
osv
osv
Cross-site Scripting in Quarkus
2023-02-23 21:30:16
CVE-2023-0044
2023-02-23 20:15:12
redhatcve
redhatcve
CVE-2023-0044
2023-01-04 08:35:35
prion
prion
Design/Logic Flaw
2023-02-23 20:15:00
nvd
nvd
CVE-2023-0044
2023-02-23 20:15:12
github
github
Cross-site Scripting in Quarkus
2023-02-23 21:30:16
cve
cve
CVE-2023-0044
2023-02-23 20:15:12
cvelist
cvelist
CVE-2023-0044
2023-02-23 00:00:00
redhat
redhat
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-03-29 18:36:09