← לוח פגיעויות

CVE-2023-4853

גבוהה 8.1

תיאור (מקור, אנגלית)

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.

מדדים

CVSS 3.1
8.1 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS — סבירות ניצול
1% (אחוזון 100) נכון ל-11/8/2026
CWE
CWE-148, CWE-863

מוצרים מושפעים

quarkus: quarkus; redhat: build of optaplanner; redhat: build of quarkus; redhat: decision manager; redhat: integration camel k; redhat: integration camel quarkus; redhat: integration service registry; redhat: jboss middleware; redhat: jboss middleware text-only advisories; redhat: openshift serverless; redhat: process automation manager; redhat: openshift container platform; redhat: enterprise linux

קישורים