Red Hat Security Advisory

RHSA-2023:5479

Release of OpenShift Serverless Client kn 1.30.1 security update

Released 2023-10-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Serverless 1.0 openshift-serverless-clients-1.9.2-3.el8

Fixes 1 record

TI-2023-04469 CVE-2023-4853 · GHSA-4f4r-wgv2-jjvg

Quarkus: http security policy bypass

MEDIUM 40

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02276 Published 2023-09-20 Partial fix · 1.9.2-3.el8, 2.13.8.Final-redhat-00005 +9 CWE-148