Red Hat Security Advisory

RHSA-2024:0494

Red Hat build of Quarkus 2.13.9.SP1 release and security update

Released 2024-01-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Quarkus 2.13.9.Final io.quarkus.quarkus-resteasy-2.13.9.Final-redhat-00003.jar, io.quarkus.quarkus-resteasy-reactive-2.13.9.Final-redhat-00003.jar

Fixes 2 records

TI-2023-05755 CVE-2023-6267 · GHSA-8j3x-w35r-rw4r

Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.

MEDIUM 44

A flaw was found in the json payload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00719 Published 2024-01-25 Partial fix · 2.13.9.Final-redhat-00003, 3.2.9.Final-redhat-00003 +2 CWE-755

TI-2023-05218 CVE-2023-5675 · GHSA-25w4-hfqg-4r52

Improper authorization in quarkus-resteasy-reactive

LOW 35

A flaw was found in Quarkus.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00458 Published 2024-04-25 Partial fix · 3.2.10.Final, 3.6.9 +4 CWE-285