~ / search / GHSA-c57v-hc7m-8px2

GHSA-c57v-hc7m-8px2

Cross-site Scripting in Quarkus

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-0044

Packages

EcosystemPackageAffectedFixed in
Maven io.quarkus:quarkus-vertx-http < 2.13.7.Final 2.13.7.Final

Details

As written in the advisory (Markdown source, shown as plain text).

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.

References

External links from the advisory. They lead to third-party sites.