CVE-2021-3914

Fixed upstream EPSS <1%

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.

Published 2022-08-25 · CVE record · OSV

Products: redhat build_of_quarkus, redhat openshift_application_runtimes, redhat smallrye_health

Fixed upstream