Red Hat Quarkus Vulnerabilities
Red%20hat Quarkus vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cookies vulnerability could lead to unauthorized data access or modification
CVE-2024-12397Red HatCryostat 37.4HIGHQuarkus CXF Vulnerability: Hidden Passwords and Secrets at Risk
CVE-2024-9621Red HatRed Hat Build Of Apach...5.3MEDIUMUndertow ProxyProtocolReadListener Vulnerability
CVE-2024-7885Red HatRed Hat Build Of Apach...7.5HIGHUndertow Vulnerability: Enabling Learning-Push Handler Can Prevent Attacks
CVE-2024-3653Red HatRed Hat Jboss Enterpri...5.3MEDIUMUndertow Vulnerability Leads to Denial of Service Attack
CVE-2024-5971Red HatRed Hat Build Of Apach...7.5HIGHQuarkus: security checks for some inherited endpoints performed after serialization in resteasy reactive may trigger a denial of service
CVE-2024-1726Red HatRed Hat Build Of Quark...5.3MEDIUMQuarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.
CVE-2023-5675Red HatRed Hat Build Of Quark...6.5MEDIUMKeycloak Flaw Allows Attackers to Bypass Validation and Access Sensitive Information
CVE-2024-1132Red HatMigration Toolkit For ...8.1HIGHQuarkus-core: leak of local configuration properties into quarkus applications
CVE-2024-2700Red HatRed Hat AMQ Streams 2.7.07HIGHMemory Leak in TLS and SNI Support in Eclipse Vert.x Toolkit Allows Attackers to Trigger JVM Out-of-Memory Error
CVE-2024-1300Red HatCeq 3.25.4MEDIUMMemory Leak Vulnerability in Eclipse Vert.x Toolkit
CVE-2024-1023Red HatCeq 3.26.5MEDIUMQuarkus Vulnerability: Inadvertent Git Credentials Exposure
CVE-2024-1979Red HatQuarkusUndertow Vulnerability Impacts Wildfly-HTTP-Client Server
CVE-2024-1635Red HatRed Hat Jboss Enterpri...7.5HIGHPotential Path Traversal Vulnerability in Undertow Could Allow Access to Privileged Files
CVE-2024-1459Red HatRed Hat Jboss Enterpri...5.3MEDIUMQuarkus: json payload getting processed prior to security checks when rest resources are used with annotations.
CVE-2023-6267Red HatRed Hat Build Of Quark...9.8CRITICALUndertow: ajp request closes connection exceeding maxrequestsize
CVE-2023-5379Red HatRed Hat Jboss Enterpri...7.5HIGHQuarkus: graphql operations over websockets bypass
CVE-2023-6394Red HatRed Hat Build Of Quark...7.4HIGHQuarkus: potential invalid reuse of context when @cacheresult on a uni is used
CVE-2023-6393Red Hatupstream5.3MEDIUMId and access tokens leak via the authorization code flow
CVE-2023-1584Red Hatquarkus-oidc7.5HIGHUndertow: outofmemoryerror due to @multipartconfig handling
CVE-2023-3223Red HatRed Hat Fuse 7.12.17.5HIGHCodehaus-plexus: xml external entity (xxe) injection
CVE-2022-4245Red HatRhint Camel-k-1.10.14.3MEDIUMCodehaus-plexus: directory traversal
CVE-2022-4244Red HatRhint Camel-k-1.10.17.5HIGHQuarkus: http security policy bypass
CVE-2023-4853Red HatOpenshift Serverless 1...8.1HIGHInfinite loop in sslconduit during close
CVE-2023-1108Red Hatundertow7.5HIGHDrools: unsafe data deserialization in streamutils
CVE-2022-1415Red HatRHPam 7.13.1 Async8.1HIGH