GHSA-c57v-hc7m-8px2MediumCVSS 6.1

Cross-site Scripting in Quarkus

Published
February 23, 2023
Last Modified
March 3, 2023

🔗 CVE IDs covered (1)

CVE-2023-0044 →

📋 Description

If the Quarkus Form Authentication session cookie Path attribute is set to / then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.

🎯 Affected products1

  • maven/io.quarkus:quarkus-vertx-http:< 2.13.7.Final

🔗 References (4)