Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-4116

Fixed upstream EPSS 33%CVSS 9.8

A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote code execution.

Published 2022-11-22 · CVE record · OSV

Products: redhat build_of_quarkus, quarkus

Fixed upstream

EcosystemPackageFixed in
Mavenio.quarkus:quarkus-vertx-http-deployment2.14.2.Final
Mavenio.quarkus:quarkus-vertx-http-deployment2.13.5.Final