8.1Yüksek
Quarkus: http security policy bypass
Red Hat Openshift Serverless 1 on RHEL 8; Red Hat Red Hat build of OptaPlanner 8; Red Hat Red Hat build of Quarkus 2.13.8.SP2; Red Hat Red Hat Camel Extensions for Quarkus 2.13.3-1
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy al…
2.3%EPSS