CVE-2023-2974
Fixed upstream EPSS <1%CVSS 6.5
A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol.
Products: Red Hat build of Quarkus 2.13.8.Final
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | io.quarkus:quarkus-core | 2.16.8.Final |