Red Hat Security Advisory

RHSA-2023:4200

Red Hat Build of OptaPlanner 8.38.0 for Quarkus 2.13.8 security update

Released 2023-07-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of OptaPlanner 8

Fixes 1 record

TI-2023-07299 CVE-2023-20883 · GHSA-xf96-w227-r7c4

Uncontrolled resource consumption in Spring Boot

MEDIUM 41

In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service (DoS) attack if Spring MVC is used together with a reverse…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00911 Published 2023-05-26 Partial fix · 3.0.7, 2.7.12 +2 CWE-400