Read the docs
Red Hat Security Advisory

RHSA-2023:6112

Red Hat Process Automation Manager 7.13.4 security one-off update

Released 2023-10-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2023-04469 CVE-2023-4853 · GHSA-4f4r-wgv2-jjvg

Quarkus: http security policy bypass

Priority MEDIUM 40

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02276 Published 2023-09-20 Partial fix · 1.9.2-3.el8, 2.13.8.Final-redhat-00005 +9 CWE-148