CVE-2023-0044

Fixed upstream EPSS <1%

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.

Published 2023-02-23 · CVE record · OSV

Products: quarkus, redhat build_of_quarkus

Fixed upstream